- From: Tab Atkins Jr. via GitHub <sysbot+gh@w3.org>
- Date: Fri, 14 Apr 2023 22:13:34 +0000
- To: public-css-archive@w3.org
In general, having the OM not reflect the stylesheet is something we should avoid as much as possible; we don't need to *perfectly* reproduce the source and so can do some normalization, but shouldn't dramatically rewrite things. I think doing this would definitely violate that. (Sass actually doesn't prevent this particular exponential explosion; the heuristics I've been thinking about this whole time are about `@extend` expansion.) But it's still the case that having the blow-up happen at build time, where it can be more obvious *and* results in gigantic transfers that are hopefully easily noticeable (and which is reliably easier for the user to interrupt), is different than the blowup happening on the client-side, internally in the browser. We try to avoid Billion Laughs attacks. -- GitHub Notification of comment by tabatkins Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/8698#issuecomment-1509346322 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Friday, 14 April 2023 22:13:35 UTC