W3C home > Mailing lists > Public > public-css-archive@w3.org > June 2018

[csswg-drafts] [css-syntax] Consider disallowing NULL code points in stylesheets

From: Rune Lillesveen via GitHub <sysbot+gh@w3.org>
Date: Mon, 11 Jun 2018 17:59:39 +0000
To: public-css-archive@w3.org
Message-ID: <issues.opened-331290157-1528739978-sysbot+gh@w3.org>
lilles has just created a new issue for https://github.com/w3c/csswg-drafts:

== [css-syntax] Consider disallowing NULL code points in stylesheets ==
Consider dropping stylesheet contents containing NULL code points or escaped NULLs, which are now replaced by the replacement character, completely. That is, let the result of parsing be as if the input was an empty string.

The rationale is that NULLs in a stylesheet are not useful, and NULL code points could be an indication of a buffer overrun, or an attempt of an attack by inserting NULL code points into the stylesheet.


Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2757 using your GitHub account
Received on Monday, 11 June 2018 17:59:52 UTC

This archive was generated by hypermail 2.3.1 : Monday, 11 June 2018 17:59:54 UTC