Re: [csswg-drafts] [css-values-4] Switch advanced attr() to being var()-like (#4482) from Henri Sivonen via GitHub on 2019-11-05 (public-css-archive@w3.org from November 2019)

From: Henri Sivonen via GitHub <sysbot+gh@w3.org>
Date: Tue, 05 Nov 2019 16:30:28 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-549896501-1572970959-sysbot+gh@w3.org>

Being able to turn any attribute into an image load URL would indeed bypass the [URL attribute sanitizer](https://searchfox.org/mozilla-central/rev/3300072e993ae05d50d5c63d815260367eaf9179/dom/base/nsTreeSanitizer.cpp#1241) in Gecko.

Does Gecko currently support using `attr()` to take a URL from any attribute as e.g. a background image?

-- 
GitHub Notification of comment by hsivonen
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4482#issuecomment-549896501 using your GitHub account

Received on Tuesday, 5 November 2019 16:30:30 UTC