Bug 62261
| Summary: | Pseudo-element selectors may defeat CSS selection restriction for nested components | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Roland Steiner <rolandsteiner> | 
| Component: | CSS | Assignee: | Nobody <webkit-unassigned> | 
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | dglazkov, dominicc, hayato, morrita | 
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | All | ||
| OS: | All | ||
| Bug Depends on: | |||
| Bug Blocks: | 59827 | ||
          Roland Steiner
          
          
          
          
        
        
      Follow-up to bug 52917: With the current implementation, style bleeds may still happen on components within components. In such a case the accessor check for the nested component can be circumvented by a shadow pseudo-element selector for the outer component. For example:
Assume you have a media control panel component that defines a container for button controls. This container is given a pseudo-ID "panel", e.g., to allow styling its background. The container also has one or more children of its own for the individual buttons, which are defined as separate components.
In this case, a selector such as "::panel *" would bleed into the buttons, even if they are set to not allow selectors through. That check would be circumvented by the presence of the "::panel" pseudo-element selector, even though this is meant for the outer component.
    | Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. | 
          Roland Steiner
          
          
          
          
        
        
      
*** This bug has been marked as a duplicate of bug 62218 ***