Re: [csswg-drafts] [css-values] Security concerns regarding attr() (#5092)

The most common use I have seen for `attr()` in print-focused CSS engines is constructions like

```css
a::before { content: target-text(attr(href url));
```

In all these cases the URL is relative. Would relative URLs be acceptable from a security standpoint?

-- 
GitHub Notification of comment by faceless2
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5092#issuecomment-2053581721 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Saturday, 13 April 2024 09:00:56 UTC