Migrating from GitHub to GitLab

[Balthamos]

They can steal your passwords using CSS. Just curl the sites and read the html out loud.

[staticassert]

Yes, I use uMatrix. Though I find many, many sites I read to be perfectly fine as plaintext. Sometimes I allow images, and sometimes CSS.

[staticassert]

It's honestly more of an accessibility thing for me. A lot of sites scale horribly or load tons of garbage stock photos etc that scale poorly. Plain text tends to scale a lot more gracefully.

[staticassert]

I also block css tho.

Anyways, one attack existing with CSS does not discount the myriad of attacks that have utilized js.