>and even refusing to fix security flaws that they mandated non-critical, although several of them used together often lead to arbitrary code execution on the client.
Source?
Anyway, even worse, back in the IE 5.x era when they added most of that stuff like XMLHTTPRequest etc., they focused on that instead of complying with even basic CSS1! (Yes, it was better than Netscape 4, but that was because the JSSS/CSS fiasco that resulted in was a lot worse) IE6 added DOCTYPE switching and a "standards" mode with better CSS1 compliance, but I don't think they touched the buggy CSS2 support, and during the time they sat on it, guess what people did with it that caused trouble when MS released IE7 that fixed some of these bugs?
Source?
Anyway, even worse, back in the IE 5.x era when they added most of that stuff like XMLHTTPRequest etc., they focused on that instead of complying with even basic CSS1! (Yes, it was better than Netscape 4, but that was because the JSSS/CSS fiasco that resulted in was a lot worse) IE6 added DOCTYPE switching and a "standards" mode with better CSS1 compliance, but I don't think they touched the buggy CSS2 support, and during the time they sat on it, guess what people did with it that caused trouble when MS released IE7 that fixed some of these bugs?