W3C home > Mailing lists > Public > whatwg@whatwg.org > August 2012

[whatwg] Support for <link rel="stylesheet" crossorigin>

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Tue, 28 Aug 2012 14:04:32 -0400
Message-ID: <503D0830.9000103@mit.edu>
To: whatwg <whatwg@whatwg.org>
I just added support for <link rel="stylesheet" crossorigin> in 
Gecko.[1]  Such links are subject to CORS checks if the load is 
cross-site, and the sheet load will fail if the CORS check fails.  If 
the CORS check succeeds, script in the page will be able to script the 
cross-site stylesheet.

This allows stylesheets served from a CDN to be scripted by the page if 
desired, so I would like to propose that we add this feature to the spec.

An open issue: what to do about @import?  I haven't done anything magic 
here yet.  Inheriting the CORS mode from the importing sheet is a bit 
weird, and I wasn't quite sure I wanted to make CSS syntax changes at 
this time.

-Boris

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=732209
Received on Tuesday, 28 August 2012 18:05:09 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:44 UTC