Re: Behavior, scripts, CSS

Tantek Celik wrote:
> 
> No need to turn off either if all you want to do is disable BeCSS.
> 
> Add this to your user style sheet of course:
> 
> * { behavior: none ! important }

And 
* {onLoad: none !important}
* {onMouseOver: none !important}
* {onFormatHardDrive: none !important}

etc.

But this gives me an idea. Just think of the cool viruses you could make
with this [!]. Imagine: the power to track a user's every movement, via
an onload put in a user style sheet (and many other things; this
provides the most powerful facility ever - I believe you could even
track user activity on their system, since everything in Windows is a
web page these days). The potential for making more powerful viruses is
immense. This would even work on secure platforms such as Unix, provided
you could persuade the user to setup your user style sheet as theirs
(or, better still, install it as part of the installation of a program).

Clearly, IMHO, it would be wrong to allow this; in any case I think we
are deluding ourselves by considering this BeCSS as CSS anyway - really,
BeCSS is a proposal to turn style sheets into a script dump. If that is
what is wanted, why bother with markup at all? Why not just put
everything in a style sheet? Then we need never have to worry about new
elements again.

-----------------------------------
Please visit http://RichInStyle.com. Featuring:
MySite: customizable styles.         AlwaysWork style 
Browser bug table covering all CSS2 with links to descriptions.
Lists of > 1000 browser bugs         Websafe Colorizer 
CSS2, CSS1 and HTML4 tutorials.      CSS masterclass 
CSS2 test suite: 5000++ tests and 300+ test pages.

Received on Tuesday, 8 August 2000 09:32:38 UTC