4 ms·
Alright... what if they could only change the CSS, and not the HTML and JS? (Obviously not a solution for Github pages, but workable in some scenarios)
by ZoFreX 14y ago
Alright... what if they could only change the CSS, and not the HTML and JS? (Obviously not a solution for Github pages, but workable in some scenarios)
- eli 14y agoStill sounds dangerous to me. It's possible to execute code from CSS! https://code.google.com/p/browsersec/wiki/Part1#Cascading_stylesheets https://code.google.com/p/browsersec/wiki/Part1#Cascading_st...