PDA

View Full Version : How safe are dynamic stylesheets that allows any user to modify?



read_write
1st July 2014, 06:10
Hello, I have a program which I plan to allow users to freely write their own stylesheet and store/load from a text file. This is mainly for allowing users to customize the interface as they desire. Now the problem is I don't have full knowledge of all the stylesheet commands and I am worried if a user could potentially exploit the dynamic stylesheet feature. To my understanding, stylesheets are only limited to changing the interface and certain behaviors and should not be able to call functions within the program. Could someone shed some light on this matter?