- From: Tab Atkins <tabatkins@google.com>
- Date: Wed, 16 Mar 2011 17:47:26 -0700
- To: John Hudson <tiro@tiro.com>
- Cc: Chris Lilley <chris@w3.org>, WOFF Working Group FONT <public-webfonts-wg@w3.org>
On Wed, Mar 16, 2011 at 5:37 PM, John Hudson <tiro@tiro.com> wrote: > Tab Atkins wrote: >> No, Chris's example used misleading text both in the title attribute >> and in the link text. The only clue about the actual destination was >> the href attribute. This is precisely the same as your vulnerability. > > Ah, for some reason Chris' example was not displaying correctly for me. I > see what you mean now. I'm glad it was just a simple misunderstanding. I wasn't sure how you weren't seeing what I and Chris were saying. ^_^ ~TJ
Received on Thursday, 17 March 2011 00:47:56 UTC