Re: [csswg-drafts] [css-values] Keylogging concerns for attr() value

> If you control the host, you can already do whatever you want. I don't think that's an attack scenario we have to worry about. 

I mean you insert a sheet which is served from a host you controlled. I don't think that's the same as controlling the host which serves the page.

GitHub Notification of comment by upsuper
Please view or discuss this issue at using your GitHub account

Received on Thursday, 22 February 2018 00:38:38 UTC