[Webkit-unassigned] [Bug 212049] New: :is() / :where() parsing allows breaking shadow tree encapsulation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=212049

            Bug ID: 212049
           Summary: :is() / :where() parsing allows breaking shadow tree
                    encapsulation
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: emilio at crisal.io
                CC: koivisto at iki.fi, rniwa at webkit.org,
                    simon.fraser at apple.com

I'm adding some tests in https://bugzilla.mozilla.org/show_bug.cgi?id=1632647. But TLDR, these shouldn't probably parse, or if you disagree they probably shouldn't match:

  ::part(foo):is([attr='value'])
  :host(:is(div .foo))

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200518/176a9403/attachment-0001.htm>