Re: XSLT style sheets

• From: Daniel Veditz <dveditz@mozilla.com>
• Date: Sat, 11 Jun 2011 11:52:56 -0700
• To: Brandon Sterne <bsterne@mozilla.com>
• CC: Adam Barth <w3c@adambarth.com>, public-web-security@w3.org
• Message-ID: <4DF3B988.5060906@mozilla.com>

On 6/10/11 4:41 PM, Brandon Sterne wrote:
>> Tentative recommendation: Control XSLT with style-src.  (Warning: I
>> haven't though through this recommendation carefully.)
> 
> I just pushed a changeset that adds XSLT stylesheets to the style-src
> directive:
> https://dvcs.w3.org/hg/content-security-policy/rev/6f4cab889cb5

This is how the Firefox 4 implementation already works, fwiw.
-Dan Veditz

Received on Saturday, 11 June 2011 18:53:32 UTC