- From: Tab Atkins Jr. <jackalmage@gmail.com>
- Date: Mon, 22 Oct 2012 14:00:58 -0700
- To: Boris Zbarsky <bzbarsky@mit.edu>
- Cc: Dimitri Glazkov <dglazkov@google.com>, "www-style@w3.org" <www-style@w3.org>, Tony Ross <tross@microsoft.com>
On Mon, Oct 22, 2012 at 1:32 PM, Boris Zbarsky <bzbarsky@mit.edu> wrote: > My main concern with making CSSStyleSheet objects directly constructable is > that it seems like it creates various footguns, in terms of specification, > implementation, and use. Most importantly, it lets you share a single > CSSStyleSheet across multiple pages, including pages that are not > same-origin due to document.domain changes.... So if there is a way to > address the use case without creating all the same complexity, I would be in > favor of it. Stylesheets leak most of their information cross-domain anyway - I think the only reason they're really still restricted is because of comments, which aren't observable except through examining cssText directly. Can we just specifically neuter this? Say that constructed stylesheets explicitly drop the contents of comments (you need to preserve the existence of them, unfortunately), and then just allow open cross-domain sharing? ~TJ
Received on Monday, 22 October 2012 21:01:45 UTC