runthis Posted November 20, 2011 Posted November 20, 2011 (edited) What would be the drawback/s of allowing players to submit CSS to the database? I know its possible to run some sort of cdata inside css, but i do not use that kind of thing too much Edited November 20, 2011 by runthis Quote
bluegman991 Posted November 20, 2011 Posted November 20, 2011 I don't really see any draw backs to it really. Just filter out properties and functions that accept xml or javascript. Like the behavior property, expression function, -moz-binding. Those are only ones I read about in the past so there may be more. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.