Open
Bug 1060939
Opened 10 years ago
Updated 2 years ago
CSS features that are for internal theming should not be exposed to content
Categories
(Core :: CSS Parsing and Computation, defect)
Tracking
()
NEW
People
(Reporter: kairo, Unassigned)
References
Details
(Keywords: dev-doc-needed, site-compat)
We have a lot of media queries and some other CSS properties that we invented for XUL and our internal themes only, those should not be exposed to content as they are not web standards and not even intended to get standardized.
Comment 1•10 years ago
|
||
Sounds reasonable. David, does it make sense to repurpose the "unsafe rules allowed" mode of the CSS parser into a general "chrome-only rules allowed"? Or do you think we should ensure the unsafe rules (the MathML stuff) are also unavailable to addons?
Flags: needinfo?(dbaron)
Comment 2•10 years ago
|
||
We might want more than one level of distinction. The "unsafe" stuff should (I think) be UA sheets only, whereas the XUL-specific stuff should be allowed in UA and user sheets, and in chrome sheets, but not in author-level non-chrome sheets. Or something like that.
(See also the mIsChromeOrCertifiedApp, and see also bug 944836 and the work being done there, which is probably a subpart of this bug.)
Flags: needinfo?(dbaron)
Comment 3•9 years ago
|
||
We not only have CSS properties, but also a lot of internal-only value keywords of some standard CSS properties are exposed to the content.
Updated•9 years ago
|
Keywords: dev-doc-needed,
site-compat
Comment 4•9 years ago
|
||
Posted the site compatibility doc just in case: https://www.fxsitecompat.com/en-US/docs/2015/several-internal-css-properties-have-been-removed/
Comment 5•9 years ago
|
||
Doh, my comment was for Bug 1211040.
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•