W3C home > Mailing lists > Public > public-css-archive@w3.org > February 2018

Re: [csswg-drafts] [css-values] Keylogging concerns for attr() value

From: Xidorn Quan via GitHub <sysbot+gh@w3.org>
Date: Thu, 22 Feb 2018 00:38:32 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-367527537-1519259911-sysbot+gh@w3.org>
> If you control the host, you can already do whatever you want. I don't think that's an attack scenario we have to worry about. 

I mean you insert a sheet which is served from a host you controlled. I don't think that's the same as controlling the host which serves the page.

-- 
GitHub Notification of comment by upsuper
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2339#issuecomment-367527537 using your GitHub account
Received on Thursday, 22 February 2018 00:38:38 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:41:24 UTC