@@ -2553,6 +2553,13 @@ The Placeholder-shown Pseudo-class: '':placeholder-shown''</h4>
25532553 whenever such placeholder text is shown.
25542554 </div>
25552555
2556+ <h4 id="autofill">
2557+ The Automatic Input Pseudo-class: '':autofill''</h4>
2558+
2559+ The <dfn>:autofill</dfn> pseudo-class represents input elements
2560+ that have been automatically filled by the user agent,
2561+ and have not been subsequently altered by the user.
2562+
25562563<h4 id="the-default-pseudo">
25572564The Default-option Pseudo-class: '':default''</h4>
25582565
@@ -4013,6 +4020,8 @@ Changes since the 21 November 2018 Working Draft</h3>
40134020 (<a href="https://github.com/w3c/csswg-drafts/issues/3821">Issue 3821</a> )
40144021 <li> Added '':muted'' and '':volume-locked'' sound state pseudo-classes.
40154022 (<a href="https://github.com/w3c/csswg-drafts/issues/3821">Issue 3821</a> and <a href="https://github.com/w3c/csswg-drafts/issues/3933">Issue 3933</a> )
4023+ <li> Added '':autofill'' .
4024+ (<a href="https://github.com/w3c/csswg-drafts/issues/5775">Issue 5775</a> )
40164025 <li> Added '':user-valid'' .
40174026 (<a href="https://lists.w3.org/Archives/Public/www-style/2015Sep/0111.html">Discussion</a> )
40184027 <li> Defined '':is()'' , '':where()'' , '':has()'' , '':nth-child()'' , and '':nth-last-child()''
@@ -4177,5 +4186,13 @@ Acknowledgements</h2>
41774186Privacy and Security Considerations {#priv-sec}
41784187==============================================
41794188
4180- This specification introduces no new privacy or security considerations,
4181- as selectors do not provide any ability not already possible by walking the DOM manually.
4189+ This specification introduces the following privacy and security considerations:
4190+ <ul>
4191+ <li>
4192+ The '':visited'' pseudo-class can expose information about which sites a user has previously visited,
4193+ if the UA is not careful to screen from scripting any information that would reveal
4194+ which elements match it.
4195+ <li>
4196+ The '':autofill'' pseudo-class can expose whether a user has interacted with this form before;
4197+ however the same information can be derived by observing how quickly the form is filled out.
4198+ </ul>
0 commit comments