- From: <bugzilla@jessica.w3.org>
- Date: Fri, 13 May 2016 06:19:55 +0000
- To: public-css-bugzilla@w3.org
https://www.w3.org/Bugs/Public/show_bug.cgi?id=23825 Jordan Milne <w3bugzilla@saynotolinux.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |w3bugzilla@saynotolinux.com --- Comment #3 from Jordan Milne <w3bugzilla@saynotolinux.com> --- We should add a caveat that the hit testing function should not descend into subdocuments. The naive solution is to use the same hit testing function used for detecting which element should receive a click, but descending into cross-origin frames will leak information about the frame's contents via timing information. At least Firefox[0] and IE11 were affected by this. [0]: https://bugzilla.mozilla.org/show_bug.cgi?id=950427 -- You are receiving this mail because: You are the QA Contact for the bug.
Received on Friday, 13 May 2016 06:19:57 UTC