Accepting user-supplied code is mostly fine (via hugoarnal) — discussion

#css #security #web