- From: Håkon Wium Lie <howcome@opera.com>
- Date: Thu, 3 Aug 2000 19:51:34 +0200 (W. Europe Daylight Time)
- To: webmaster@richinstyle.com
- Cc: www-style@w3.org
Also sprach Matthew Brealey:
> style type="text/css" add <>
> @script {
> function screw() {
> Thus, I believe it is possible to produce a CSS virus, which is not cool
> at all, particularly in view of the stuff in CSS1 about CSS not becoming
> a programming language (it didn't say CSS wouldn't become a virus, but I
> suppose that was obvious).
As you have shown, CSS becomes a security risk if @script is added.
Which is why I personally oppose this extension.
-h&kon
Chief Technology Officer Opera Software
Håkon Wium Lie http://www.opera.com/people/howcome
howcome@opera.com gets you there faster
Received on Thursday, 3 August 2000 13:46:41 UTC