3 ms·

Good point. I forgot about the abomination that is HTML emails

• chrismorgan 6y ago
  And this is hardly the only justifiable reason for allowing <style>. A couple of other examples that occur to me are platforms allowing full user-generated and -styled pages, and validation tools. Remember with this that each application can choose what it wants to allow or deny. It would be very harmful for DOMPurify to not allow certain sorts of tags just because you can’t immediately think up a reason why you might want to use it.