Reviewers: kpreid2,

Description:
https://code.google.com/p/google-caja/issues/detail?id=1669

Our CSS selector filter deletes selectors it does not understand,
which cannot be virtualized accurately, or which are not yet properly
virtualized (particularly, attribute selectors).

If this happens to the input to querySelector, then if no selectors
remain, a syntax error occurs because we pass the empty string to the
browser querySelector. If one or more selectors make it through, the
client will receive an unexpectedly shorter list. This behavior is
overly inconsistent. Instead:

Please review this at https://codereview.appspot.com/10892043/

Affected files:
  M     src/com/google/caja/plugin/sanitizecss.js
  M     tests/com/google/caja/plugin/sanitizecss_test.js


--

--- You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to