This question already has an answer here:
- CSS based attacks 1 answer
I'm working on a blog site, and I plan to allow bloggers to completely edit the style sheet for their own blogs
I assume this isn't dangerous, since CSS is client side, but I thought it'd be best to check. If there a way someone could use this feature to implant backdoors and such into my site?