[css-color-4] mention ICC profiles have no executable code #5552

w3c · Oct 21, 2020 · 5f7f59d · 5f7f59d
1 parent b4b51c8
commit 5f7f59d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/css-color-4/Overview.bs b/css-color-4/Overview.bs
@@ -3899,6 +3899,12 @@ to create user interfaces that appear to be from the system.
 However, as several system colors are now defined to be "generic",
 this risk is believed to be mitigated.
 
+This specification adds to CSS the on-demand
+downloading of ICC profiles.
+These do not contain executable code,
+and thus do not consitiute an increased security risk.
+
+
 Accessibility Considerations {#a11y-sec}
 ========================================