4 ms·
That's about the bare minimum. Does any modern client not do that? But I think an HTML renderer that doesn't even have support for Javascript, audio and video t
by anoncake 6y ago
That's about the bare minimum. Does any modern client not do that? But I think an HTML renderer that doesn't even have support for Javascript, audio and video tags, perhaps parts of CSS, etc. has a smaller attack surface.
- tracker1 6y agoAutomatic playing of audio or video, and no eval support in css would also be a good idea.