I'd only allow a fixed catalogue of predefined CSS templates, where you can define some of the colors, fonts and background images through a form when selecting the CSS for the sub. Of course downloadable fonts are a no-no and images must come from a trusted image host.
view the rest of the comments →
go1dfish ago
Yeah IMO Voat should disable CSS by default until external references can be sanitized or whitelisted somehow.
gringo ago
I'd only allow a fixed catalogue of predefined CSS templates, where you can define some of the colors, fonts and background images through a form when selecting the CSS for the sub. Of course downloadable fonts are a no-no and images must come from a trusted image host.
EngelbertHumperdinck ago
Everyone has their own ideas about which image hosts can be trusted. Just never come here without VPN.