On 13/03/2019 01:46, flor...@rivoal.net wrote:
> On Wednesday, March 13, 2019 at 8:36:17 AM UTC+9, Emilio Cobos Álvarez wrote:
>> On 13/03/2019 00:22, Florian Rivoal wrote:
>>> Given that this is not merely setting a limit because you find that 
>>> implementation more convenient, but actually a case of considering it 
>>> desirable to ignore large cursors in certain cases (and for security 
>>> reasons even), I wonder if this is something that we should consider 
>>> including in the specification. What do you tink?
>>
>> I think a note or such in the spec would be nice, yeah. FWIW some
>> platforms already had pre-existing cursor limits for similar reasons[1]
>> since forever.
>>
>> I probably wouldn't bother specifying a concrete limit, though not sure
>> how you feel about that. Seems like depending how big the browser's UI
>> is, a browser could make different tradeoffs without compromising security.
> 
> Could you raise it to the CSSWG, and we can see there what's appropriate, 
> taking into account what others browsers do?

Filed https://github.com/w3c/csswg-drafts/issues/3728. Thanks!

 -- Emilio

> Thanks,
> —Florian
> _______________________________________________
> dev-platform mailing list
> dev-platform@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-platform
> 
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to