W3C home > Mailing lists > Public > public-css-archive@w3.org > June 2018

Re: [csswg-drafts] [css-syntax] Consider disallowing NULL code points in stylesheets

From: Simon Sapin via GitHub <sysbot+gh@w3.org>
Date: Thu, 28 Jun 2018 00:54:42 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-400876551-1530147281-sysbot+gh@w3.org>
Back to the topic, I agree with @FremyCompany that the concern doesn’t seem real. There is no evidence to support the “could be a sign of an attack” claim.

Replacing with U+FFFD already makes most CSS constructs invalid or not matching. I don’t think we need to go out of our way to do anything else.

GitHub Notification of comment by SimonSapin
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/2757#issuecomment-400876551 using your GitHub account
Received on Thursday, 28 June 2018 00:54:45 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 18 February 2020 09:36:24 UTC