- From: James Aylett <sja20@hermes.cam.ac.uk>
- Date: Tue, 27 May 1997 11:54:38 +0100 (BST)
- To: Wolfgang Klimt <klimt@informatik.tu-muenchen.de>
- cc: www-style@w3.org
On Tue, 27 May 1997, Wolfgang Klimt wrote:
> yesterday I discovered that Netscape Communicator allows stylesheets
> only to be loaded from the server the html-page was loaded from, in
> any other case it produces a "JavaScript Error" (???) and doesn't
> apply the CSS stylesheet. I'm a friend of security, but I can't see
> any reason why a stylesheet could be a security risk! For me this
> means a great limitation, as we have many web-servers that should use
> the same stylesheet loaded from one reference location.
This is probably down to the way Netscape implements stylesheets using
JavaScript (JSSL if I understand it correctly). I guess it sort of makes
sense to limit scripts to the same site (ish, although there are good
reasons against it as well ...) but certainly this is another major problem
(similar to stylesheets disappearing when you turn off JS ...).
James
--
/--------------------------------------------------------------------------\
James Aylett -- Crystal Services (crystal.clare.cam.ac.uk) Ftp and Web
Clare College, Cambridge, CB2 1TL -- sja20@cam.ac.uk
Received on Tuesday, 27 May 1997 06:55:45 UTC