Re: [csswg-drafts] [css-values] Security concerns regarding attr() (#5092)

Note that it’s not possible to use any CSS function inside `url(…)` since it’s a legacy thing which always parses its first argument as a raw string: <https://drafts.csswg.org/css-syntax/#consume-a-url-token>

-- 
GitHub Notification of comment by ExE-Boss
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5092#issuecomment-1345176472 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Saturday, 10 December 2022 07:51:11 UTC