Re: per-site user stylesheet rules

> That being said, do these things need to be specified in CSS? Or, to put 
> it another way, is it likely that you will ever send such stylesheets 
> over the wire? To be honest, I strongly doubt it. The security issues 
> are too important: if you go to http://dahut.org/ and I send a 
> stylesheet that has:
> 
> @document domain(mozilla.org) {
>   :root {
>     display: none;
>   }
> }
> 
> I assume you wouldn't want that to apply, especially as I could do 
> things nastier than that such as attach an XBL keyboard logger to your 
> bank's site.
> 
> So it's limited to local files that will never be interchanged. Does it 
> need to become a standard?

Maybe a "End User CSS Module" could be created, which includes such 
among other functionalities.


-- 
  Anne van Kesteren
  <http://annevankesteren.nl/>