Re: Risks from CSS injection

2009/12/9 Maciej Stachowiak <mjs@apple.com>

> Selectors cannot select based on CSS property values, as opposed to DOM
> attribute values. So what you write here won't work. It's setting the width
> CSS property, not the width attribute in the DOM, but the other selectors
> are reading from the DOM.
>
> I think that in general there will never be a CSS selector that depends on
> the value of CSS property, because then style resolution could cause an
> infinite loop.
>

Thanks Maciej I wasn't aware of this but still the Attr() function shouldn't
be allowed to get the value attribute of a element and I would suggest the
url syntax be dropped or that url() be a requirement when using it.