jonny (good kind) on Nostr: Ok security heads, whats the worst thing that could happen if we let people supply ...

Ok security heads, whats the worst thing that could happen if we let people supply their own custom HAML templates for their profile pages so we can go full #MyspaceMode

Edit: wait hang on there's way less in the template than i thought, I figured it woulda at least been a skeleton but nope just embedding a big blob of react.

Ok different question is how do you allow someone to override a big blob of react

Edit2: I am being told this would be "very bad to do" and that indeed it is "one of the main things you should not do," but cmon you have to forget about fundamental stuff in order to think of new ways the world can be good and cool sometimes.