[csswg-drafts] [css-syntax] Consider disallowing NULL code points in stylesheets

lilles has just created a new issue for https://github.com/w3c/csswg-drafts:

== [css-syntax] Consider disallowing NULL code points in stylesheets ==
Consider dropping stylesheet contents containing NULL code points or escaped NULLs, which are now replaced by the replacement character, completely. That is, let the result of parsing be as if the input was an empty string.

The rationale is that NULLs in a stylesheet are not useful, and NULL code points could be an indication of a buffer overrun, or an attempt of an attack by inserting NULL code points into the stylesheet.


Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2757 using your GitHub account

Received on Monday, 11 June 2018 17:59:52 UTC