Re: [csswg-drafts] [css-values-4] Switch advanced attr() to being var()-like (#4482)

> Can you elaborate on this, @emilio?

I just meant that the interesting case in terms of the sanitization-bypass that I mentioned is when you're disallowing the style attribute and `<style>` elements (as otherwise it is pointless).

> Is this right? How bad is the sanitization issue?

I'm not the right person to evaluate that; @hsivonen maybe?

-- 
GitHub Notification of comment by emilio
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4482#issuecomment-555786214 using your GitHub account

Received on Wednesday, 20 November 2019 00:58:12 UTC