Re: [csswg-drafts] [selectors][css-values] Hide "sensitive" attributes from CSS (#5136)

My thinking is that no, `attr()` used at the top-level of 'content' as a "string" type should continue to work with everything, as it does today.

(But it might be okay to restrict it the same way, if we default to allowlisting most HTML attributes. Depends on existing usage of data-* attributes in attr().)

-- 
GitHub Notification of comment by tabatkins
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5136#issuecomment-639119566 using your GitHub account

Received on Thursday, 4 June 2020 21:13:44 UTC