Avoid CSS Expressions
December 8th, 2011
No comments
MSIE5 added support for CSS expressions or “Dynamic Properties”, however MSIE8 ‘deprecated’ their use and prevents their use in Standards Mode.
While powerful because this allowed you to script your CSS dynamically, there were two primary problems.
- Performance – the expression could fire literally hundreds or thousands of times on a page when scrolled or resized.
- Security – this represented an attack vector and exposed XSS
REFERENCES:
Categories: MSIE bugs, WebStandards, Work browser, client, css, dynamic, expression, expressions, javascript, msie, performance, properties, setExpression