First CSS3 security bug found, patched?

200724 Feb
First CSS3 security bug found, patched?
by Peter Gasston
Posted in Browsers
Tweet

The latest security update of Firefox, 2.0.0.2, provides a fix for a possible spoofing attack using the CSS3 cursor property.

As far as I’m aware, this is the first known security hole which uses CSS3 properties; perhaps someone can correct me if I’m wrong.

You can skip to the end and leave a response.
Comments
- 01.
  
  Robin says:Comment » February 25th, 2007 at 6:29 pm
  
  There’s the old :visited hole but that’s not CSS3 specific, just CSS. Also, it’s more of a privacy than a security issue.
- 02.
  
  Weblog de Brainet » Archivo del weblog » Bug de seguridad en CSS3 says:Comment » February 26th, 2007 at 12:14 pm
  
  [...] First CSS3 security bug found, patched? [...]