On Wednesday, March 13, 2019 at 8:36:17 AM UTC+9, Emilio Cobos Álvarez wrote: > On 13/03/2019 00:22, Florian Rivoal wrote: > > Given that this is not merely setting a limit because you find that > > implementation more convenient, but actually a case of considering it > > desirable to ignore large cursors in certain cases (and for security > > reasons even), I wonder if this is something that we should consider > > including in the specification. What do you tink? > > I think a note or such in the spec would be nice, yeah. FWIW some > platforms already had pre-existing cursor limits for similar reasons[1] > since forever. > > I probably wouldn't bother specifying a concrete limit, though not sure > how you feel about that. Seems like depending how big the browser's UI > is, a browser could make different tradeoffs without compromising security.
Could you raise it to the CSSWG, and we can see there what's appropriate, taking into account what others browsers do? Thanks, —Florian _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
