Re: [cssom][security] Cross-origin style sheets from Boris Zbarsky on 2013-06-07 (www-style@w3.org from June 2013)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Fri, 07 Jun 2013 12:21:32 -0400
To: Simon Pieters <simonp@opera.com>
CC: "www-style@w3.org" <www-style@w3.org>, Anne van Kesteren <annevk@annevk.nl>
Message-ID: <51B2088C.8020902@mit.edu>

On 6/7/13 8:51 AM, Simon Pieters wrote:
> I would appreciate review of the following change:
>
> https://dvcs.w3.org/hg/csswg/rev/b3a214e224d7
> [cssom] Disallow reading and modifying of cross-origin sheets. Integrate
> with URL and Fetch specs for xml-stylesheet and Link:. Only expose
> pre-redirect URL of a sheet.

Looks fairly reasonable at first glance.

-Boris

Received on Friday, 7 June 2013 16:22:04 UTC