Every attack relies on [`<url>`](https://drafts.csswg.org/css-values/#urls). Can other uses of `attr()` be considered safe and therefore need no restriction at all? -- GitHub Notification of comment by Crissov Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5136#issuecomment-639257245 using your GitHub accountReceived on Friday, 5 June 2020 04:51:39 UTC
This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:42:09 UTC