Intent to Prototype: CSS advanced attr() function (Was: Intent to Implement and Ship)

[Xiaocheng Hu]

Note: This was originally an Intent to Implement and Ship. We split it due to security concerns.

Contact emails xiaoc...@chromium.org Explainer https://developer.mozilla.org/en-US/docs/Web/CSS/attr#Examples Design docs/spec Specification: https://drafts.csswg.org/css-values-4/#attr-notation https://bit.ly/2YZ0egU TAG review https://github.com/w3ctag/design-reviews/issues/513 Summary Implement the augmentation to attr() specified in CSS Level 4, which allows types besides <string> and usage in all CSS properties (besides pseudo-element 'content'). Note: CSS Level 4 has made substantial revisions to attr() compared to Level 3 to ease the implementation. We'll follow CSS4. Motivation This is a highly requested feature, with 77 stars at crbug.com/246571. We also want to keep it considered in the CR period by adding the first implementation. Risks

Interoperability and Compatibility No browser has implemented this feature yet. Even though there's no negative signals from other browsers, there's still a minimal interoperability risk that we end up the only implementation. There are also a few known cases where this advanced version behaves differently from the basic version in pseudo-element content property, which is a compatibility risk: - https://bit.ly/2XDhHtg - https://bit.ly/3grF3ur Firefox: No public signals (https://bugzilla.mozilla.org/show_bug.cgi?id=435426) Edge: No public signals Safari: No public signals (https://bugs.webkit.org/show_bug.cgi?id=26609) Web developers: No signals Security attr() can be used by injected CSS for data exfiltration. https://github.com/w3c/csswg-drafts/issues/5092

Will this feature be supported on all six Blink platforms (Windows, Mac, Linux, Chrome OS, Android, and Android WebView)? Yes Is this feature fully tested by web-platform-tests? No There's some WPT coverage as for May 2020: https://wpt.fyi/results/css/css-values?label=master&label=experimental&aligned&q=attr We will introduce more tests: https://bugs.chromium.org/p/chromium/issues/detail?id=1081995 Link to entry on the Chrome Platform Status https://chromestatus.com/feature/4680129030651904

This intent message was generated by Chrome Platform Status.

[Parviz Shahmoradi]

در تاریخ چهارشنبه ۲۷ مهٔ ۲۰۲۰،‏ ۰۰:۱۱ Xiaocheng Hu <xiaoc...@chromium.org> نوشت:

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAFqEGhZdFk6ELWWKSQZJDtp9E_BwuQOntj0awyKWr7VNVzJ44Q%40mail.gmail.com.