Re: [csswg-drafts] [css-values] Keylogging concerns for attr() value from Xidorn Quan via GitHub on 2018-02-21 (public-css-archive@w3.org from February 2018)

From: Xidorn Quan via GitHub <sysbot+gh@w3.org>
Date: Wed, 21 Feb 2018 04:28:22 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-367210028-1519187301-sysbot+gh@w3.org>

So that POC relies on component frameworks like React, which seems to put the value inputted by user back to the value attribute, which caused the keylogging issue. In that case, `attr()` may still enable a more powerful keylogger, but I'm not sure how much do we as the working group care about this concern.

-- 
GitHub Notification of comment by upsuper
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2339#issuecomment-367210028 using your GitHub account

Received on Wednesday, 21 February 2018 04:29:17 UTC