Re: virus?

Also sprach Matthew Brealey:

 > style type="text/css" 			add <>
 > @script {
 > function screw() {

 > Thus, I believe it is possible to produce a CSS virus, which is not cool
 > at all, particularly in view of the stuff in CSS1 about CSS not becoming
 > a programming language (it didn't say CSS wouldn't become a virus, but I
 > suppose that was obvious).

As you have shown, CSS becomes a security risk if @script is added.
Which is why I personally oppose this extension.


Chief Technology Officer                                Opera Software
Håkon Wium Lie                                           gets you there faster

Received on Thursday, 3 August 2000 13:46:41 UTC