You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<<media-query-list>>, which is parsed and interpreted as a <a>media query list</a>,
237
-
and <<supports-condition>>, is parsed and interpreted as a [[supports query]].
248
+
and <<supports-condition>>, is parsed and interpreted as a [=supports query=].
238
249
If a <<declaration>> is given in place of a <<supports-condition>>,
239
250
it must be interpreted as a <<supports-decl>>
240
251
(i.e. the extra set of parentheses is implied)
@@ -994,7 +1005,7 @@ Cascade Sorting Order</h3>
994
1005
995
1006
<ul>
996
1007
<li>Style sheets are ordered
997
-
in [[final CSS style sheets]] order.
1008
+
in [=final CSS style sheets=] order.
998
1009
<li>Declarations from <a at-rule lt="@import">imported style sheets</a>
999
1010
are ordered as if their style sheets were substituted in place of the ''@import'' rule.
1000
1011
<li>Declarations from style sheets independently linked by the originating document
@@ -1325,7 +1336,7 @@ Non-trivial changes since the <a href="https://www.w3.org/TR/2022/CR-css-cascade
1325
1336
1326
1337
<!-- to 11 Jan 2022 -->
1327
1338
* Clarify that all “aliases” of a property are reverted by ''revert''.
1328
-
* Clarify that style sheets are ordered in [[final CSS style sheets]] order.
1339
+
* Clarify that style sheets are ordered in [=final CSS style sheets=] order.
1329
1340
1330
1341
<h3 id="changes-2021-10">
1331
1342
Changes since the 15 Oct 2021 Working Draft</h3>
@@ -1418,7 +1429,7 @@ Changes Since the 14 January 2016 Candidate Recommendation</h3>
1418
1429
<dl>
1419
1430
<dt>user origin
1420
1431
<dd>
1421
-
Rolls back the <del>cascade</del><ins><a>cascaded value</a><ins> to the user-agent level,
1432
+
Rolls back the <del>cascade</del><ins><a>cascaded value</a></ins> to the user-agent level,
1422
1433
so that the <a>specified value</a> is calculated as if no author-level or user-level rules were specified for this property <ins>on this element</ins>.
1423
1434
1424
1435
<dt>author origin
@@ -1465,7 +1476,7 @@ Changes Since the 14 January 2016 Candidate Recommendation</h3>
1465
1476
as their properties are now observable distinct from their inline parent’s
1466
1477
via ''display: contents''[[css-display-3]].
1467
1478
<blockquote>
1468
-
<ins><p>For the purpose of this specification,
1479
+
<ins>For the purpose of this specification,
1469
1480
<a>text nodes</a> are treated as <a spec=css-display-3>element</a> children of their associated element,
1470
1481
and possess the full set of properties;
1471
1482
since they cannot be targeted by selectors
@@ -1529,8 +1540,8 @@ Additions Since Level 2</h3>
1529
1540
and Boris Zbarsky
1530
1541
contributed to this specification.
1531
1542
1532
-
<h2 class=no-num id=priv-sec>
1533
-
Privacy and Security Considerations</h2>
1543
+
<h2 class=no-num id=privacy>
1544
+
Privacy Considerations</h2>
1534
1545
1535
1546
* The cascade process does not distinguish between same-origin and cross-origin stylesheets,
1536
1547
enabling the content of cross-origin stylesheets to be inferred
@@ -1540,12 +1551,15 @@ Privacy and Security Considerations</h2>
1540
1551
are exposed by the cascade process,
1541
1552
and can be inferred from the computed styles they apply to a document.
1542
1553
1543
-
* The ''@import'' rule does not apply the [=CORS protocol=] to loading cross-origin stylesheets,
1544
-
instead allowing them to be freely imported and applied.
1545
-
1546
1554
* The ''@import'' rule assumes that resources without <a href="https://html.spec.whatwg.org/multipage/urls-and-fetching.html#content-type"><code>Content-Type</code> metadata</a>
1547
1555
(or any same-origin file if the host document is in quirks mode)
1548
1556
are <code>text/css</code>,
1549
1557
potentially allowing arbitrary files to be imported into the page
1550
1558
and interpreted as CSS,
1551
1559
potentially allowing sensitive data to be inferred from the computed styles they apply to a document.
1560
+
1561
+
<h2 class=no-num id=security>
1562
+
Security Considerations</h2>
1563
+
1564
+
* The ''@import'' rule does not apply the [=CORS protocol=] to loading cross-origin stylesheets,
1565
+
instead allowing them to be freely imported and applied.
0 commit comments