3 ms·
The point is they either need to filter the served content, or serve it from a different domain (e.g. githubusercontent.com), otherwise you have XSS-like proble
by mormegil 6y ago
The point is they either need to filter the served content, or serve it from a different domain (e.g. githubusercontent.com), otherwise you have XSS-like problems.
- michaelmior 6y agoMy understanding is that things like this are one of the reasons GitHub moved GitHub Pages subdomains from github.com to github.io.