dmaax/ladybird
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

LibWeb: Only allow anchor() values in inset properties

Browse source
This commit is contained in:
Tim Ledbetter 2026-06-14 20:36:51 +01:00 committed by Sam Atkins
parent c1100a7c73
commit e4a5957bc6
1 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
Libraries/LibWeb/CSS/Parser/ValueParsing.cpp
View file

@ -684,6 +684,28 @@ RefPtr<StyleValue const> Parser::parse_anchor(TokenStream<ComponentValue>& token
if (!function_token.is_function("anchor"sv))
return {};
// It is only allowed in the inset properties (and is otherwise invalid).
static Array allowed_property_ids = {
PropertyID::Inset,
PropertyID::Top,
PropertyID::Right,
PropertyID::Bottom,
PropertyID::Left,
PropertyID::InsetBlock,
PropertyID::InsetBlockStart,
PropertyID::InsetBlockEnd,
PropertyID::InsetInline,
PropertyID::InsetInlineStart,
PropertyID::InsetInlineEnd,
};
auto property_context = m_value_context.last_matching([](ValueParsingContext const& it) {
return it.has<PropertyID>();
});
bool valid_property_context = property_context.has_value() && allowed_property_ids.contains_slow(property_context->get<PropertyID>());
if (!valid_property_context)
return {};
auto argument_tokens = TokenStream { function_token.function().value };
auto context_guard = push_temporary_value_parsing_context(FunctionContext { function_token.function().name });
Optional<FlyString> anchor_name;