Re: unsafe-inline for style-src

On 9/18/12 6:40 PM, Mike West wrote:
>> * doc.body.setAttribute("style", "...");
...
>> * doc.body.style.background = "...";

There is no functional different between those two.  Especially not if 
you actually consider:

   doc.body.style.cssText = "....";

-Boris

Received on Wednesday, 19 September 2012 00:12:38 UTC