Bug 62261

Summary:	Pseudo-element selectors may defeat CSS selection restriction for nested components
Product:	WebKit	Reporter:	Roland Steiner <rolandsteiner>
Component:	CSS	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	dglazkov, dominicc, hayato, morrita
Priority:	P2
Version:	528+ (Nightly build)
Hardware:	All
OS:	All
Bug Depends on:
Bug Blocks:	59827

Description Roland Steiner 2011-06-07 19:44:42 PDT

Follow-up to bug 52917: With the current implementation, style bleeds may still happen on components within components. In such a case the accessor check for the nested component can be circumvented by a shadow pseudo-element selector for the outer component. For example:

Assume you have a media control panel component that defines a container for button controls. This container is given a pseudo-ID "panel", e.g., to allow styling its background. The container also has one or more children of its own for the individual buttons, which are defined as separate components.

In this case, a selector such as "::panel *" would bleed into the buttons, even if they are set to not allow selectors through. That check would be circumvented by the presence of the "::panel" pseudo-element selector, even though this is meant for the outer component.

Comment 1 Roland Steiner 2011-06-07 21:13:12 PDT


*** This bug has been marked as a duplicate of bug 62218 ***