Re: [csswg-drafts] [css-values] Keylogging concerns for attr() value

> If you control the host, you can already do whatever you want. I don't think that's an attack scenario we have to worry about. 

I mean you insert a sheet which is served from a host you controlled. I don't think that's the same as controlling the host which serves the page.

-- 
GitHub Notification of comment by upsuper
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2339#issuecomment-367527537 using your GitHub account

Received on Thursday, 22 February 2018 00:38:38 UTC