RESOLVED WONTFIX 52523
CSSOM modifications don't fire DOM mutation events
https://bugs.webkit.org/show_bug.cgi?id=52523
Summary CSSOM modifications don't fire DOM mutation events
Eli Grey (:sephr)
Reported 2011-01-15 17:37:35 PST
Created attachment 79082 [details] Testcase Modifying stylesheets or modifying element styles via the DOM Style API doesn't fire mutation events, and it should. Reproducible: Always Steps to Reproduce: 1. Listen for DOMSubtreeModified on the document or the appropriate mutation events for what you're modifying. 2. Change the style of an element or modify a stylesheet. Actual Results: Nothing happens. Expected Results: Appropriate mutation events are fired. This bug introduces a vulnerability into an untrusted DOM security lib I'm writing to see what's possible for XSS defense.
Attachments
Testcase (1.56 KB, application/xhtml+xml)
2011-01-15 17:37 PST, Eli Grey (:sephr)
no flags
Testcase (1.54 KB, application/xhtml+xml)
2011-01-15 19:39 PST, Eli Grey (:sephr)
no flags
Eli Grey (:sephr)
Comment 1 2011-01-15 19:39:53 PST
Created attachment 79086 [details] Testcase I also submitted this to Mozilla's Bugzilla and there has been some discussion: https://bugzilla.mozilla.org/show_bug.cgi?id=626160
Brent Fulgham
Comment 2 2022-07-12 14:14:01 PDT
Mutation events are a security nightmare. No web browser passes these tests, and Firefox has stated that don't intend to take action here.
Note You need to log in before you can comment on or make changes to this bug.