canmove, Confirmed users
640
edits
Firefox3.1/CSS Transforms Security Review: Difference between revisions
Firefox3.1/CSS Transforms Security Review (view source)
Revision as of 18:55, 20 August 2008
, 20 August 2008→Review comments
(→Overview: Add link to bug on Bugzilla) |
|||
| (One intermediate revision by one other user not shown) | |||
| Line 5: | Line 5: | ||
* [http://webkit.org/specs/CSSVisualEffects/CSSTransforms.html Webkit's Proposed Spec], of which this patch implements only a subset. | * [http://webkit.org/specs/CSSVisualEffects/CSSTransforms.html Webkit's Proposed Spec], of which this patch implements only a subset. | ||
* [http://webkit.org/blog/130/css-transforms/ Webkit's announcement] of what their initial implementation covers | * [http://webkit.org/blog/130/css-transforms/ Webkit's announcement] of what their initial implementation covers | ||
* [https://bugzilla.mozilla.org/show_bug.cgi?id=435293 Bug 435293: Add support for | * [https://bugzilla.mozilla.org/show_bug.cgi?id=435293 Bug 435293: Add support for CSS3 Transforms] | ||
== Security and Privacy == | == Security and Privacy == | ||
| Line 62: | Line 62: | ||
** No. | ** No. | ||
== Review comments == | == Review comments == | ||
* DOM apis not implemented (or reviewed) | |||
* transforms clipped according to the frame | |||
* scaling overflows assumed to be handled by Thebes -- need to fuzz | |||
* need developer documentation (MDC) of the subset we're actually implementing, using the -moz- names we actually parse. | |||