i can just... post a url and everyone will just load it inline?
bruh no way
Discussion
works on five clients i tested
someone can just post random urls to gelbooru and everyone will load them blindly inline ... who thinks this is a good idea bruhhhhh
i, for one, think this is the best idea ever
why cant people learn that CORS and CSP exists for a reason. inb4 inline svg