If you take a look at tildes CSS (https://tildes.net/css/tildes.css), you see classes. All classes that are one word (without -) can be used in tags. You just have to tag post with any tag with...
If you take a look at tildes CSS (https://tildes.net/css/tildes.css), you see classes. All classes that are one word (without -) can be used in tags. You just have to tag post with any tag with multiple words (delimited by spaces) and one (or more) of them have to be name of the css class.
That's because class of tag is following format label-topic-tag-<name of tag>. In HTML, CSS classes are delimited by space. So by having space in tag name, you can inject css classes into tags.
Technically, I can inject any classes, not just those that are defined. However, those who are undefined will have no effect. Yes, good to point out. Otherwise, we could abuse css exfil vulnerability
Technically, I can inject any classes, not just those that are defined. However, those who are undefined will have no effect.
Yes, I tried to apply custom style as soon as I saw the post with bordered tag but it didn't work, even sending customized data to server (to avoid client side validation) didn't work. I think...
Yes, I tried to apply custom style as soon as I saw the post with bordered tag but it didn't work, even sending customized data to server (to avoid client side validation) didn't work. I think it's safe.
If you take a look at tildes CSS (https://tildes.net/css/tildes.css), you see classes. All classes that are one word (without
-) can be used in tags. You just have to tag post with any tag with multiple words (delimited by spaces) and one (or more) of them have to be name of the css class.That's because class of tag is following format
label-topic-tag-<name of tag>. In HTML, CSS classes are delimited by space. So by having space in tag name, you can inject css classes into tags.Technically, I can inject any classes, not just those that are defined. However, those who are undefined will have no effect.
Yes, good to point out. Otherwise, we could abuse css exfil vulnerability
Yes, I tried to apply custom style as soon as I saw the post with bordered tag but it didn't work, even sending customized data to server (to avoid client side validation) didn't work. I think it's safe.
this is a
textsample with bold