News for hackers. Stuff that matters.
Re:Thinking out loud about 2nd-gen email by jandrese on Friday May 17, 2024 @03:28PM (#40393399)
I'd also restrict the allowed CSS to the tiny portion of the spec that styles the text and maybe some basic layout. Definitely no scripting allowed.
Re:Thinking out loud about 2nd-gen email by smeehee on Friday May 17, 2024 @03:46PM (#40393566)
And require that if any colours are set, both foreground and background are set. (I've seen too much breakage with assumptions about one or the other.)