Bug 62261 - Pseudo-element selectors may defeat CSS selection restriction for nested components
Summary: Pseudo-element selectors may defeat CSS selection restriction for nested comp...
Status: RESOLVED DUPLICATE of bug 62218
Alias: None
Product: WebKit
Classification: Unclassified
Component: CSS (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks: 59827
  Show dependency tree / graph
 
Reported: 2011-06-07 19:44 PDT by Roland Steiner
Modified: 2011-06-07 21:13 PDT (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Roland Steiner 2011-06-07 19:44:42 PDT 
Follow-up to bug 52917: With the current implementation, style bleeds may still happen on components within components. In such a case the accessor check for the nested component can be circumvented by a shadow pseudo-element selector for the outer component. For example:

Assume you have a media control panel component that defines a container for button controls. This container is given a pseudo-ID "panel", e.g., to allow styling its background. The container also has one or more children of its own for the individual buttons, which are defined as separate components.

In this case, a selector such as "::panel *" would bleed into the buttons, even if they are set to not allow selectors through. That check would be circumvented by the presence of the "::panel" pseudo-element selector, even though this is meant for the outer component.
Comment 1 Roland Steiner 2011-06-07 21:13:12 PDT 

*** This bug has been marked as a duplicate of bug 62218 ***