Re: [csswg-drafts] [css-values] Security concerns regarding attr() (#5092)

There's no way to pull an attribute value from an element other then the one you're styling, and I've been unable to apply _any_ sort of style to `<script>` and `<style>` while testing - no matter what I did they remained as `display:none`, which means that generating content within them that contains an attribute value would be impossible even if `attr()` were fully implemented.

I presume this was by design, but I'm not sure where it's specified.

GitHub Notification of comment by faceless2
Please view or discuss this issue at using your GitHub account

Received on Friday, 29 May 2020 17:35:30 UTC