Bug 52523

Summary: CSSOM modifications don't fire DOM mutation events
Product: WebKit Reporter: Eli Grey (:sephr) <bugmail>
Component: CSSAssignee: Nobody <webkit-unassigned>
Status: RESOLVED WONTFIX    
Severity: Normal CC: ap, bfulgham, rniwa
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
URL: http://code.eligrey.com/testcases/all/dom-style-mutation-events.xhtml
Attachments:
Description Flags
Testcase
none
Testcase none

Eli Grey (:sephr)
Reported 2011-01-15 17:37:35 PST
Created attachment 79082 [details] Testcase Modifying stylesheets or modifying element styles via the DOM Style API doesn't fire mutation events, and it should. Reproducible: Always Steps to Reproduce: 1. Listen for DOMSubtreeModified on the document or the appropriate mutation events for what you're modifying. 2. Change the style of an element or modify a stylesheet. Actual Results: Nothing happens. Expected Results: Appropriate mutation events are fired. This bug introduces a vulnerability into an untrusted DOM security lib I'm writing to see what's possible for XSS defense.
Attachments
Testcase (1.56 KB, application/xhtml+xml)
2011-01-15 17:37 PST, Eli Grey (:sephr) 		no flags
Details
Testcase (1.54 KB, application/xhtml+xml)
2011-01-15 19:39 PST, Eli Grey (:sephr) 		no flags
Details
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Eli Grey (:sephr)
Comment 1 2011-01-15 19:39:53 PST
Created attachment 79086 [details] Testcase I also submitted this to Mozilla's Bugzilla and there has been some discussion: https://bugzilla.mozilla.org/show_bug.cgi?id=626160
Brent Fulgham
Comment 2 2022-07-12 14:14:01 PDT
Mutation events are a security nightmare. No web browser passes these tests, and Firefox has stated that don't intend to take action here.
Note You need to log in before you can comment on or make changes to this bug.