W3C home > Mailing lists > Public > www-style@w3.org > June 2013

Re: [cssom][security] Cross-origin style sheets

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Fri, 07 Jun 2013 12:21:32 -0400
Message-ID: <51B2088C.8020902@mit.edu>
To: Simon Pieters <simonp@opera.com>
CC: "www-style@w3.org" <www-style@w3.org>, Anne van Kesteren <annevk@annevk.nl>
On 6/7/13 8:51 AM, Simon Pieters wrote:
> I would appreciate review of the following change:
>
> https://dvcs.w3.org/hg/csswg/rev/b3a214e224d7
> [cssom] Disallow reading and modifying of cross-origin sheets. Integrate
> with URL and Fetch specs for xml-stylesheet and Link:. Only expose
> pre-redirect URL of a sheet.

Looks fairly reasonable at first glance.

-Boris
Received on Friday, 7 June 2013 16:22:04 UTC

This archive was generated by hypermail 2.3.1 : Friday, 7 June 2013 16:22:05 UTC