[CSP3] "style-src 'none';" and presentation hints/mapped attributes

I don't see much previous discussion (only [1]) about attributes that are
treated as presentation hints and mapped into style[2][3] and how they should be
treated when the 'style' attribute is blocked.

It would seem to make sense to block mapped attributes in this case for HTML,
but it would break most SVG content.

1. https://lists.w3.org/Archives/Public/public-webappsec/2012Nov/0019.html
2.
https://html.spec.whatwg.org/#the-css-user-agent-style-sheet-and-presentational-hints
3. https://svgwg.org/svg2-draft/single-page.html#attindex-PresentationAttributes

Received on Wednesday, 3 October 2018 11:10:10 UTC