- From: Tab Atkins Jr. <jackalmage@gmail.com>
- Date: Thu, 19 Feb 2015 08:36:24 -0800
- To: Daniel Glazman <daniel.glazman@disruptive-innovations.com>
- Cc: "public-houdini@w3.org" <public-houdini@w3.org>
On Thu, Feb 19, 2015 at 7:58 AM, Daniel Glazman <daniel.glazman@disruptive-innovations.com> wrote: > On 19/02/2015 16:46, Tab Atkins Jr. wrote: >> Well.... actually, the only reason we don't expose cross-origin >> stylesheets is the possibility of information leakage due to comments >> in the source. The parser doesn't emit comments per spec. We >> probably could expose a parsed representation of them, then. We just >> can't offer a CSSOM of them. > > I don't understand what you said above. The CSSOM does not contain such > comments and still you say you can't offer a CSSOM? Did you mean you > can't offer access to the textual contents of the original stylesheet? The CSSOM *does* contain such comments, because it offers access to the textual contents of the stylesheet. Nothing else is private, since it can all be inferred from styling, at least theoretically. ~TJ
Received on Thursday, 19 February 2015 16:37:10 UTC