Post
Zach Leatherman
zachleat.com
did:plc:xpchjovbk6sxl3bv74z7cs54
TIL that CSS attr() cannot be used to compute anything in `url()` as the spec considers these to be “attr()-tainted” (for very valid security reasons): https://drafts.csswg.org/css-values-5/#attr-security
2025-10-28T13:09:24.356Z