Intent to Prototype: CSS advanced attr() function (Was: Intent to Implement and Ship)

88 views
Skip to first unread message

Xiaocheng Hu

unread,
May 26, 2020, 3:41:12 PM5/26/20
to blink-dev
Note: This was originally an Intent to Implement and Ship. We split it due to security concerns.

xiaoc...@chromium.org https://developer.mozilla.org/en-US/docs/Web/CSS/attr#Examples Specification: https://drafts.csswg.org/css-values-4/#attr-notation https://bit.ly/2YZ0egU https://github.com/w3ctag/design-reviews/issues/513 Implement the augmentation to attr() specified in CSS Level 4, which allows types besides <string> and usage in all CSS properties (besides pseudo-element 'content'). Note: CSS Level 4 has made substantial revisions to attr() compared to Level 3 to ease the implementation. We'll follow CSS4. This is a highly requested feature, with 77 stars at crbug.com/246571. We also want to keep it considered in the CR period by adding the first implementation.
No browser has implemented this feature yet. Even though there's no negative signals from other browsers, there's still a minimal interoperability risk that we end up the only implementation. There are also a few known cases where this advanced version behaves differently from the basic version in pseudo-element content property, which is a compatibility risk: - https://bit.ly/2XDhHtg - https://bit.ly/3grF3ur Firefox: No public signals (https://bugzilla.mozilla.org/show_bug.cgi?id=435426) Edge: No public signals Safari: No public signals (https://bugs.webkit.org/show_bug.cgi?id=26609) Web developers: No signals attr() can be used by injected CSS for data exfiltration. https://github.com/w3c/csswg-drafts/issues/5092
Yes No There's some WPT coverage as for May 2020: https://wpt.fyi/results/css/css-values?label=master&label=experimental&aligned&q=attr We will introduce more tests: https://bugs.chromium.org/p/chromium/issues/detail?id=1081995 https://chromestatus.com/feature/4680129030651904
This intent message was generated by Chrome Platform Status.

Parviz Shahmoradi

unread,
May 26, 2020, 5:40:39 PM5/26/20
to Xiaocheng Hu, blink-dev

در تاریخ چهارشنبه ۲۷ مهٔ ۲۰۲۰،‏ ۰۰:۱۱ Xiaocheng Hu <xiaoc...@chromium.org> نوشت:
--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAFqEGhZdFk6ELWWKSQZJDtp9E_BwuQOntj0awyKWr7VNVzJ44Q%40mail.gmail.com.
Reply all
Reply to author
Forward
0 new messages