- From: Robert O'Callahan <robert@ocallahan.org>
- Date: Wed, 13 Nov 2013 19:32:43 -0800
- To: Alan Stearns <stearns@adobe.com>
- Cc: Dirk Schulze <dschulze@adobe.com>, www-style list <www-style@w3.org>
Received on Thursday, 14 November 2013 03:33:10 UTC
On Wed, Nov 13, 2013 at 7:21 PM, Alan Stearns <stearns@adobe.com> wrote: > I am expecting to use a self-referential version of element() for > shape-outside, to allow wrapping around rendered contours. The security > issues present in element() match the security issues in using rendered > contours for wrapping, so I think it's a good fit. > Actually, they don't. Using element() as a CSS image does not expose any information about alpha values of Web content to content Javascript. Using element() in any way that effects layout would expose such information. Rob -- Jtehsauts tshaei dS,o n" Wohfy Mdaon yhoaus eanuttehrotraiitny eovni le atrhtohu gthot sf oirng iyvoeu rs ihnesa.r"t sS?o Whhei csha iids teoa stiheer :p atroa lsyazye,d 'mYaonu,r "sGients uapr,e tfaokreg iyvoeunr, 'm aotr atnod sgaoy ,h o'mGee.t" uTph eann dt hwea lmka'n? gBoutt uIp waanndt wyeonut thoo mken.o w
Received on Thursday, 14 November 2013 03:33:10 UTC