LibWeb: Disallow global CSS keywords in @font-face font-family

Author: https://github.com/AtkinsSJ Commit: dbb0b68175 Pull-request: https://github.com/SerenityOS/serenity/pull/13407 Reviewed-by: https://github.com/trflynn89
2025-09-12 12:32:21 +00:00 · 2022-03-31 20:14:21 +01:00 · 2022-03-31 20:14:21 +01:00 · dbb0b68175 · 2024-07-17 22:55:25 +09:00
commit dbb0b68175
parent dbbd6d3508
1 changed files with 5 additions and 0 deletions
--- a/Userland/Libraries/LibWeb/CSS/Parser/Parser.cpp
+++ b/Userland/Libraries/LibWeb/CSS/Parser/Parser.cpp
@ -4412,6 +4412,11 @@ RefPtr<CSSRule> Parser::parse_font_face_rule(TokenStream<ComponentValue>& tokens
                    continue;
                }
                if (part.is(Token::Type::Ident)) {
+                    if (is_builtin(part.token().ident())) {
+                        dbgln_if(CSS_PARSER_DEBUG, "CSSParser: @font-face font-family format invalid; discarding.");
+                        had_syntax_error = true;
+                        break;
+                    }
                    auto value_id = value_id_from_string(part.token().ident());
                    if (is_generic_font_family(value_id)) {
                        dbgln_if(CSS_PARSER_DEBUG, "CSSParser: @font-face font-family format invalid; discarding.");