- From: Tab Atkins Jr. via GitHub <sysbot+gh@w3.org>
- Date: Fri, 12 Apr 2024 20:33:44 +0000
- To: public-css-archive@w3.org
> I would be much more in favor of shipping attr() support with a whitelist
Yup, some of our internal security folk were finally able to give a "probably okay" to attr() with some restrictions (mainly, not capable of making a url, unless whitelisted). I'll be working on updating the spec for this Soon. No need to make a new attr().
> How do people feel about ident("--" ...) vs dashed-ident(...)
My initial reaction is that we don't need a special function just to save adding an initial `"--"` argument. We can always revisit in the future, but this seems like a *very* narrow convenience feature to justify.
--
GitHub Notification of comment by tabatkins
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/9141#issuecomment-2052490994 using your GitHub account
--
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Friday, 12 April 2024 20:33:45 UTC