- From: Anne van Kesteren <fora@annevankesteren.nl>
- Date: Fri, 20 Aug 2004 10:46:42 +0200
- To: Robin Berjon <robin.berjon@expway.fr>
- CC: "L. David Baron" <dbaron@dbaron.org>, www-style@w3.org
> That being said, do these things need to be specified in CSS? Or, to put
> it another way, is it likely that you will ever send such stylesheets
> over the wire? To be honest, I strongly doubt it. The security issues
> are too important: if you go to http://dahut.org/ and I send a
> stylesheet that has:
>
> @document domain(mozilla.org) {
> :root {
> display: none;
> }
> }
>
> I assume you wouldn't want that to apply, especially as I could do
> things nastier than that such as attach an XBL keyboard logger to your
> bank's site.
>
> So it's limited to local files that will never be interchanged. Does it
> need to become a standard?
Maybe a "End User CSS Module" could be created, which includes such
among other functionalities.
--
Anne van Kesteren
<http://annevankesteren.nl/>
Received on Friday, 20 August 2004 08:47:11 UTC