On 3/19/18 11:21 AM, Emilio Cobos Álvarez wrote:
> On 11/29/17 6:36 PM, Mike Taylor wrote:
>>
>>> On Nov 29, 2017, at 10:53 AM, Emilio Cobos Álvarez wrote:
>>>
>>> In bug 1035091 I intend to remove support for the @-moz-document CSS
>>> rule in content pages (more exactly in author stylesheets).
>
On 11/29/17 6:36 PM, Mike Taylor wrote:
>
>> On Nov 29, 2017, at 10:53 AM, Emilio Cobos Álvarez wrote:
>>
>> In bug 1035091 I intend to remove support for the @-moz-document CSS
>> rule in content pages (more exactly in author stylesheets).
>
> This is a pretty widely used mechanism to target st
Le 30 nov. 2017 à 02:42, Emilio Cobos Álvarez a écrit :
> On 11/29/2017 06:36 PM, Mike Taylor wrote:
>> This is a pretty widely used mechanism to target styles for Gecko. Would it
>> be possible to disable in non-release for a few releases to sniff out any
>> major layout/compat bustage?
>
>
On 11/29/17 12:42 PM, Emilio Cobos Álvarez wrote:
Another thing we could try to do if plain unshipping fails would be to
just hide the regex matching function, which IIUC would prevent the
security issue too. But hiding it behind a pref on non-release for now
sounds good.
Boris, would you also b
On 11/29/2017 06:36 PM, Mike Taylor wrote:
>
>> On Nov 29, 2017, at 10:53 AM, Emilio Cobos Álvarez wrote:
>>
>> In bug 1035091 I intend to remove support for the @-moz-document CSS
>> rule in content pages (more exactly in author stylesheets).
>
> This is a pretty widely used mechanism to target
> On Nov 29, 2017, at 10:53 AM, Emilio Cobos Álvarez wrote:
>
> In bug 1035091 I intend to remove support for the @-moz-document CSS
> rule in content pages (more exactly in author stylesheets).
This is a pretty widely used mechanism to target styles for Gecko. Would it be
possible to disable
On 11/29/17 11:53 AM, Emilio Cobos Álvarez wrote:
Let me know if there's any concern on doing this.
@-moz-document url-prefix() {
/* rules go here */
}
at least used to be a somewhat common way to have "Firefox-only" rules
on web pages. https://stackoverflow.com/search?q=moz-document
On Thu, Nov 30, 2017, at 03:53 AM, Emilio Cobos Álvarez wrote:
> Hi again,
>
> In bug 1035091 I intend to remove support for the @-moz-document CSS
> rule in content pages (more exactly in author stylesheets).
>
> The reasoning for this, apart from it being a non-standard mozilla-only
> CSS featu
Hi again,
In bug 1035091 I intend to remove support for the @-moz-document CSS
rule in content pages (more exactly in author stylesheets).
The reasoning for this, apart from it being a non-standard mozilla-only
CSS feature, is that it's a possible security risk in presence of CSS
injection attack
9 matches
Mail list logo
