W3C home > Mailing lists > Public > www-international@w3.org > October to December 2007

Re: [CSS21] Case-insensitivity not defined

From: Martin Duerst <duerst@it.aoyama.ac.jp>
Date: Fri, 16 Nov 2007 14:12:33 +0900
Message-Id: <>
To: "Mark Davis" <mark.davis@icu-project.org>, fantasai <fantasai.lists@inkedblade.net>
Cc: www-international@w3.org, www-style@w3.org

At 09:01 07/11/16, Mark Davis wrote:
>If CSS identifiers do not exclude compatibility characters (such as Kelvin and the ff ligature), then lowercasing is the *least* of the security issues to worry about. 

The identifiers really in question are limited to things such as
counter names. Such names are used internal to a single style
sheet, or internal to a set of coordinated style sheets, and
it is therefore difficult to immagine how they could be used
for security attacks such as spoofing and the like.

Regards,    Martin.

#-#-#  Martin J. Du"rst, Assoc. Professor, Aoyama Gakuin University
#-#-#  http://www.sw.it.aoyama.ac.jp       mailto:duerst@it.aoyama.ac.jp     
Received on Friday, 16 November 2007 05:47:17 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 22:40:55 UTC