You are viewing a single comment's thread.

view the rest of the comments →

go1dfish ago

Yeah IMO Voat should disable CSS by default until external references can be sanitized or whitelisted somehow.

gringo ago

I'd only allow a fixed catalogue of predefined CSS templates, where you can define some of the colors, fonts and background images through a form when selecting the CSS for the sub. Of course downloadable fonts are a no-no and images must come from a trusted image host.

EngelbertHumperdinck ago

Everyone has their own ideas about which image hosts can be trusted. Just never come here without VPN.