The point is they either need to filter the served content, or serve it from a d... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		mormegil on Dec 8, 2020 \| parent \| context \| favorite \| on: CSS in GitHub Readmes The point is they either need to filter the served content, or serve it from a different domain (e.g. githubusercontent.com), otherwise you have XSS-like problems.

michaelmior on Dec 8, 2020 [–]

My understanding is that things like this are one of the reasons GitHub moved GitHub Pages subdomains from github.com to github.io.

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact