canmove, Confirmed users
640
edits
Firefox3.1/CSS Transforms Security Review: Difference between revisions
Firefox3.1/CSS Transforms Security Review (view source)
Revision as of 18:55, 20 August 2008
, 20 August 2008→Review comments
(→Overview: fix link) |
|||
| (3 intermediate revisions by one other user not shown) | |||
| Line 4: | Line 4: | ||
;Background links | ;Background links | ||
* [http://webkit.org/specs/CSSVisualEffects/CSSTransforms.html Webkit's Proposed Spec], of which this patch implements only a subset. | * [http://webkit.org/specs/CSSVisualEffects/CSSTransforms.html Webkit's Proposed Spec], of which this patch implements only a subset. | ||
* [http://webkit.org/blog/130/css-transforms/ Webkit's announcement] of what their initial implementation covers | |||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=435293 Bug 435293: Add support for CSS3 Transforms] | |||
== Security and Privacy == | == Security and Privacy == | ||
| Line 60: | Line 62: | ||
** No. | ** No. | ||
== Review comments == | == Review comments == | ||
* DOM apis not implemented (or reviewed) | |||
* transforms clipped according to the frame | |||
* scaling overflows assumed to be handled by Thebes -- need to fuzz | |||
* need developer documentation (MDC) of the subset we're actually implementing, using the -moz- names we actually parse. | |||