You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: css-ui-3/Overview.bs
+5-15
Original file line number
Diff line number
Diff line change
@@ -1371,7 +1371,7 @@ and
1371
1371
This appendix is <em>informative</em>.
1372
1372
1373
1373
This appendix describes changes from the
1374
-
<a href="https://www.w3.org/TR/2015/CR-css-ui-3-20170302/">Candidate Recommendation (CR) of 2 March 2017</a>.
1374
+
<a href="https://www.w3.org/TR/2017/CR-css-ui-3-20170302/">Candidate Recommendation (CR) of 2 March 2017</a>.
1375
1375
1376
1376
<ul>
1377
1377
<li>Updated references to latest versions
@@ -1416,15 +1416,17 @@ Per the <a href="https://w3ctag.github.io/security-questionnaire/#questions">Que
1416
1416
</li>
1417
1417
1418
1418
<li>Does this specification enable new script execution/loading mechanisms?
1419
-
<p>Yes. The 'cursor' property accepts <<image>> values which may include URLs to be loaded.</p>
1419
+
<p>Yes to loading, but not to execution. The 'cursor' property accepts <<image>> values which may include URLs to be loaded.
1420
+
These may be SVG documents which may contain scripts,
1421
+
but this specification requires that scripts must not be run.</p>
1420
1422
</li>
1421
1423
1422
1424
<li>Does this specification allow an origin access to a user’s location?
1423
1425
<p>No.</p>
1424
1426
</li>
1425
1427
1426
1428
<li>Does this specification allow an origin access to sensors on a user’s device?
1427
-
<p>Yes. The directional focus navigation properties indirectly allow access to the device's keyboard navigation input mechanism such as arrow keys.</p>
1429
+
<p>No.</p>
1428
1430
</li>
1429
1431
1430
1432
<li>Does this specification allow an origin access to aspects of a user’s local computing environment?
0 commit comments