475217 - CSS parser accepts "@namespace url(x" -- missing close paren at EOF

Status: RESOLVED INVALID

(Core :: CSS Parsing and Computation, defect)

Description

[Jesse Ruderman]

Attachment: testcase

Firefox's CSS parser doesn't mind the missing ")" as long as there's an EOF right there:

  @namespace url(x

is accepted and turned into

  @namespace url(x);

(I'm just guessing this is a bug.  Safari and Opera don't seem to support .cssRules for @namespace, so it's hard for me to tell what they do.)

Comment 1

[Jesse Ruderman]

Attachment: testcase 2

Similarly, Firefox seems fine with an unclosed quote at the end of the file:

@namespace '

Comment 2

[Jesse Ruderman]

I found this more through accident than through fuzzing.  If this is a bug, I can have the fuzzer test for some invariant like "adding \n at the end shouldn't affect the result of parsing" to look for more bugs like it.

Comment 3

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

We're supposed to be ok with these, I think, although it's a relatively recent change in the spec.

Comment 4

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

In particular, see http://www.w3.org/TR/CSS21/syndata.html#parsing-errors -- the parts about "Unexpected end of style sheet" and "Unexpected end of string".