-
Notifications
You must be signed in to change notification settings - Fork 757
Closed
Labels
Closed DeferredCommenter SatisfiedCommenter has indicated satisfaction with the resolution / edits.Commenter has indicated satisfaction with the resolution / edits.Testing UnnecessaryMemory aid - issue doesn't require testsMemory aid - issue doesn't require testscss-syntax-3
Milestone
Description
Consider dropping stylesheet contents containing NULL code points or escaped NULLs, which are now replaced by the replacement character, completely. That is, let the result of parsing be as if the input was an empty string.
The rationale is that NULLs in a stylesheet are not useful, and NULL code points could be an indication of a buffer overrun, or an attempt of an attack by inserting NULL code points into the stylesheet.
tomhodgins
Metadata
Metadata
Assignees
Labels
Closed DeferredCommenter SatisfiedCommenter has indicated satisfaction with the resolution / edits.Commenter has indicated satisfaction with the resolution / edits.Testing UnnecessaryMemory aid - issue doesn't require testsMemory aid - issue doesn't require testscss-syntax-3