David Woolley wrote: > > I very much hope not, as one of the advantages of CSS is that it does > not have the power of a general programming language and is therefore > much less likely to provide access to security holes, and, at least in > principle, easier to analyze mechanically. The BECSS draft already crosses this line by importing scripts through the 'binding' property. I haven't seen any serious discussion in the WG about the security implications of this. ~fantasaiReceived on Saturday, 27 October 2007 15:23:32 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 11 September 2008 23:28:59 GMT