- From: Rijk van Geijtenbeek <rijk@iname.com>
- Date: Thu, 30 Oct 2003 12:23:10 +0100
- To: www-style@w3.org, www-style-request@w3.org
Hello Tantek,
On Thursday, October 30, 2003 you wrote:
>> body { background: url("javascript:alert(\'Hello\ again!\ (background)\')");
>> }
>>
>> ...is possible right now, and shows a dialog in at least two browsers.
> If you take something which is safe, mix it with something that is unsafe,
> you end up with a result that is unsafe.
And if you disable JavaScript in Opera (with the F12 quick prefs), you
will not get the popup. No need to disable styling or go into user
mode.
This can be used to support both sides of the argument though ;)
Greetings,
Rijk mailto:rijk@iname.com
Mot du Jour:
Question _your own_ authority.
Received on Thursday, 30 October 2003 06:25:51 UTC