Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • by Ovid (2709) on 2005.03.18 14:23 (#38996) Homepage Journal

    I actually think that's great news. Woo hoo! Will you let people apply their own stylesheets?

    • At first, I doubt it. But if there's enough request for it, who knows?
      • Applying your own stylesheets opens the potential for abuse, sadly. It's giving people complete control of the layout. What's to stop some troll from using a bit of absolute position to completely overlay the entire page with a picture of goatse?

        I seem to recall that this sort of thing happened on advogato a while back, although not as offensive.

        -Dom

        • Well, if you allow people to paste raw CSS into their own user prefs, the only people who see goatse are the ones who specifically asked for it. I don't see what the problem is.
          • If we do it at all, it probably would only be in the form of allowing somone to point at a stylesheet URL. That should be sufficient, I think.
            • You're more likely to get the malicious-goatse-attack scenario by external pointing, unfortunately:

              1. Someone creates a nifty new stylesheet
              2. Stylesheet URL gets really popular
              3. Stylesheet suddenly gets switched to goatse, either by hacking or malicious owner

              This also assumes that the URL can survive the continual Slashdotting of point 2, which is several times less likely than the above attack.

              • It's not like we'd be keeping a public list of the stylesheets. If someone wants to link to their friend's stylesheet, that's their business.
                • That all sounds better than what I had in mind -- allowing specification of style="" attributes. That really causes a problem because everybody gets to see it.

                  -Dom

                  • Oh, you mean so someone gets your style if they see your page? Yeah, we won't be doing that. For that, if we may decide to accept themes from the community, but we would have to host them.