4 ms·
I'd also restrict the allowed CSS to the tiny portion of the spec that styles the text and maybe some basic layout. Definitely no scripting allowed.
by jandrese 2y ago
I'd also restrict the allowed CSS to the tiny portion of the spec that styles the text and maybe some basic layout. Definitely no scripting allowed.
- smeehee 2y agoAnd require that if any colours are set, both foreground and background are set. (I've seen too much breakage with assumptions about one or the other.)