- From: Simon Pieters via GitHub <sysbot+gh@w3.org>
- Date: Mon, 13 Mar 2017 06:49:19 +0000
- To: public-texttracks@w3.org
zcorpan has just created a new issue for https://github.com/w3c/webvtt:
== Recursively disallow external resources ==
http://w3c.github.io/webvtt/#style-no-external-resources
> For the purpose of resolving URLs in STYLE blocks of a WebVTT file, if the URL’s scheme is not "data", then the user agent must act as if the URL failed to resolve\.
Need to disallow external resources (other than `data:`) within `@import`ed `data:` URL stylesheets or SVG images as well.
```
STYLE
::cue(#x) { background-image: url("data:image/svg+xml,<svg ...><image xlink:href='https://example.org/'/></svg>"); }
```
Please view or discuss this issue at https://github.com/w3c/webvtt/issues/341 using your GitHub account
Received on Monday, 13 March 2017 06:49:25 UTC