On Tue, Oct 11, 2022 at 8:56 AM 'Artur Janc' via blink-dev <[email protected]> wrote: > I have one security-related question about this feature: how does CSS nesting > interact with :visited selectors and the protections to avoid revealing the > visitedness of links from https://dbaron.org/mozilla/visited-privacy? > > I'm guessing that the solution from > https://dbaron.org/mozilla/visited-privacy#algorithm (specifically, the > second paragraph in that section) should still apply for nested selectors, > but since this seems like a substantial feature I was wondering if you'd > explicitly thought about this?
Apologies that this didn't get answered, but the answer is just: there's nothing special to worry about here. Nesting is essentially syntax sugar for just writing out a bunch of rules yourself; it just lets you avoid repetition of common sections of the selectors. So, all the protections we do for :visited shouldn't be affected by this. ~TJ -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAAWBYDDqC7w-Xs_tfezDuV5rS2zg%3DjxDpO1_s%2BKsT3NtmG5FRA%40mail.gmail.com.
