I'd also restrict the allowed CSS to the tiny portion of the spec that styles th... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		jandrese on May 17, 2024 \| parent \| context \| favorite \| on: Thinking out loud about 2nd-gen email I'd also restrict the allowed CSS to the tiny portion of the spec that styles the text and maybe some basic layout. Definitely no scripting allowed.

smeehee on May 17, 2024 [–]

And require that if any colours are set, both foreground and background are set. (I've seen too much breakage with assumptions about one or the other.)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact