Some HTML/CSS is fine

Changing colours , doing
, funs stuff like


Is a lot of fun

But this shouldn’t be possible I think:

Heh, yeah, it was never my intention to allow HTML — I just failed to filter it out. I’ll patch that up shortly to ensure consistency in the gameplay (and to prevent anything along the spectrum ranging from harmless shenanigans to legitimate security threats).

At some point I’ll work out a way to support colors or other safe styling, but I’m going to reign it in for now (especially since I received an email about another specific kind of vulnerability related to this).

1 Like