W3C home > Mailing lists > Public > public-css-archive@w3.org > June 2018

Re: [csswg-drafts] [css-syntax] Consider disallowing NULL code points in stylesheets

From: Rune Lillesveen via GitHub <sysbot+gh@w3.org>
Date: Tue, 12 Jun 2018 09:24:04 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-396525340-1528795443-sysbot+gh@w3.org>
Seems like Gecko's been somewhat fixed since last time I tested. They used to truncate to "hello" for --a below:

```
<div id="a"></div>
<div id="b"></div>

<script type="text/javascript">
var css = document.createElement("style");
css.innerHTML = '* { --a: hello\0world; font-family: "foo\0test"; }';
document.body.appendChild(css);

a.innerHTML = getComputedStyle(document.body).getPropertyValue('--a');
b.innerHTML = getComputedStyle(document.body).getPropertyValue('font-family');
</script>
```

Gecko does not replace with a replacement character in custom idents, it seems.


-- 
GitHub Notification of comment by lilles
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2757#issuecomment-396525340 using your GitHub account
Received on Tuesday, 12 June 2018 09:24:06 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 12 June 2018 09:24:08 UTC