You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
and a defined behavior on the rendering of the document.
@@ -235,8 +247,8 @@ Shorthand Properties</h2>
235
247
</div>
236
248
237
249
<div class='example'>
238
-
For example, the CSS Level 1 'font' property
239
-
is a <a>shorthand</a> property for setting <a property>font-style</a>, <a property>font-variant</a>, <a property>font-weight</a>, 'font-size', 'line-height', and <a property>font-family</a> all at once.
250
+
For example, the CSS Level 1 <css><a href="https://www.w3.org/TR/css-fonts-3/#font-prop">font</a></css> property
251
+
is a <a>shorthand</a> property for setting <css><a href="https://www.w3.org/TR/css-fonts-3/#font-style-prop">font-style</a></css>, <css><a href="https://www.w3.org/TR/css-fonts-3/#font-variant-prop">font-variant</a></css>, <css><a href="https://www.w3.org/TR/css-fonts-3/#font-weight-prop">font-weight</a></css>, <css><a href="https://www.w3.org/TR/css-fonts-3/#font-size-prop">font-size</a></css>, 'line-height', and <css><a href="https://www.w3.org/TR/css-fonts-3/#font-family-prop">font-family</a></css> all at once.
@@ -1046,8 +1058,8 @@ Additions Since Level 2</h3>
1046
1058
and Boris Zbarsky
1047
1059
contributed to this specification.
1048
1060
1049
-
<h2 class="no-num" id="priv-sec">
1050
-
Privacy and Security Considerations</h2>
1061
+
<h2 class="no-num" id="privacy">
1062
+
Privacy Considerations</h2>
1051
1063
1052
1064
* The cascade process does not distinguish between same-origin and cross-origin stylesheets,
1053
1065
enabling the content of cross-origin stylesheets to be inferred
@@ -1057,12 +1069,15 @@ Privacy and Security Considerations</h2>
1057
1069
are exposed by the cascade process,
1058
1070
and can be inferred from the computed styles they apply to a document.
1059
1071
1060
-
* The ''@import'' rule does not apply the [=CORS protocol=] to loading cross-origin stylesheets,
1061
-
instead allowing them to be freely imported and applied.
1062
-
1063
1072
* The ''@import'' rule assumes that resources without <a href="https://html.spec.whatwg.org/multipage/urls-and-fetching.html#content-type"><code>Content-Type</code> metadata</a>
1064
1073
(or any same-origin file if the host document is in quirks mode)
1065
1074
are <code>text/css</code>,
1066
1075
potentially allowing arbitrary files to be imported into the page
1067
1076
and interpreted as CSS,
1068
1077
potentially allowing sensitive data to be inferred from the computed styles they apply to a document.
1078
+
1079
+
<h2 class="no-num" id="security">
1080
+
Security Considerations</h2>
1081
+
1082
+
* The ''@import'' rule does not apply the [=CORS protocol=] to loading cross-origin stylesheets,
1083
+
instead allowing them to be freely imported and applied.
0 commit comments