- From: Lea Verou via GitHub <sysbot+gh@w3.org>
- Date: Sun, 23 Jun 2024 18:23:44 +0000
- To: public-css-archive@w3.org
Also, URLs in `<use>` are loaded in locked up mode even when all this is in an inline `<svg>` (AND same-origin). E.g. this: ```html <!-- HTML content here --> <svg viewBox="0 0 932 616"> <use href="images/chart.svg#root" /> </svg> <!-- HTML content here --> ``` will _still_ load the SVG in locked-up mode (no external URLs, no interaction). Please someone explain to me how this is helping security because I’m _really_ failing to see it… -- GitHub Notification of comment by LeaVerou Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/10481#issuecomment-2185261619 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Sunday, 23 June 2024 18:23:44 UTC