- From: Brandon McConnell via GitHub <sysbot+gh@w3.org>
- Date: Tue, 15 Nov 2022 20:08:39 +0000
- To: public-css-archive@w3.org
Yeah, I'm all for that! With that in mind, maybe this could actually work using something as simple as a special HTML attribute that browsers will require elements to have in order to execute either `attr()` or `value()` on them since only first-party scripts would have the ability to add such an attribute post-pageload which are already trusted anyway. CSS would then be limited to only those "whitelisted" elements. 👏🏼 -- GitHub Notification of comment by brandonmcconnell Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/7869#issuecomment-1315808630 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Tuesday, 15 November 2022 20:08:40 UTC