May I express a personal wish that this behaviour be under
user control ? Whilst I fully understand David Baron's
rationale for the change, I do not believe that it is the
responsibility of browsers to work around security deficiencies
that arise from the correct implementation of W3C standards.
If the CSS, (X)HTML, and/or related (e.g., HTTP) specifications,
either individually or when taken together, lead to a security
deficiency, then this should be addressed at the specification
level and not by mandatory changes to a browser which would
cause the latter to deviate from the specification(s).
A user-controllable feature within the browser, on the other hand,
would provide a convenient way of working around any deficienc{y|ies}
in the specification(s) whilst still allowing the user to have a
fully compliant browser if he/she so wishes.
Philip Taylor
--------
Philippe Wittenbergh wrote:
> (public service announcement)
>
> Both the next release versions of Gecko (tentatively named Firefox 3.7) and
> WebKit (Safari 5) will implement changes to the handling of the :visited
> pseudo-class. Google Chrome will, I suppose, also implement this.
>
> In short, those browsers will limit the ways the a:visited state can be
> styled. Color, background-color, and to some extend, outline, border are not
> affected, as long as you don't use alpha-transparency (rgba()), change the
> border-style or border-width, etc. Other changes will be ignored and fall
> back to what is specified for the a:link state.
>
> The underlying thinking is documented in this article:
> http://dbaron.org/mozilla/visited-privacy
> with some more details here:
> http://hacks.mozilla.org/2010/03/privacy-related-changes-coming-to-css-vistited/
> http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/
>
> Gecko bug report:
> https://bugzilla.mozilla.org/show_bug.cgi?id=147777
> WebKit bug report:
> https://bugs.webkit.org/show_bug.cgi?id=24300
> Philippe
> ---
> Philippe Wittenbergh
> http://l-c-n.com/
>
>
>
>
>
> ______________________________________________________________________
> css-discuss [cs...@lists.css-discuss.org]
> http://www.css-discuss.org/mailman/listinfo/css-d
> List wiki/FAQ -- http://css-discuss.incutio.com/
> List policies -- http://css-discuss.org/policies.html
> Supported by evolt.org -- http://www.evolt.org/help_support_evolt/
______________________________________________________________________
css-discuss [cs...@lists.css-discuss.org]
http://www.css-discuss.org/mailman/listinfo/css-d
List wiki/FAQ -- http://css-discuss.incutio.com/
List policies -- http://css-discuss.org/policies.html
Supported by evolt.org -- http://www.evolt.org/help_support_evolt/
