Skip to content

Whitelist CSS properties within style attribute #1374

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
matthew-a-thomas opened this issue Aug 18, 2020 · 5 comments
Closed

Whitelist CSS properties within style attribute #1374

matthew-a-thomas opened this issue Aug 18, 2020 · 5 comments
Labels

Comments

@matthew-a-thomas
Copy link

matthew-a-thomas commented Aug 18, 2020

I understand the need to protect against scriptless attacks but many CSS properties are very useful and innocent. Could the style attribute be allowed with a whitelisted subset of CSS properties?

Copy link

Stale issue message

Copy link

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@github-actions github-actions bot added the Stale label Feb 21, 2025
@matthew-a-thomas
Copy link
Author

matthew-a-thomas commented Feb 21, 2025

I prefer for this issue to be closed in a more active way than merely becoming stale and being cleaned by a bot. So... bump

@github-actions github-actions bot removed the Stale label Feb 22, 2025
Copy link

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@github-actions github-actions bot added the Stale label Apr 23, 2025
@matthew-a-thomas
Copy link
Author

I see that GitHub has no plans for tackling this

@matthew-a-thomas matthew-a-thomas closed this as not planned Won't fix, can't repro, duplicate, stale Apr 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant