Why can't we be just allowed to use use html and css to make threads?

[2.570]

Umm you are correct. But I was just wondering what is the security concern. JavaScript? Because HTML and CSS are just markup languages and can't do anything else. So if <script> is disabled??

<img> tags would have to be disabled too because you could use it like this:

Code:

<img style="display: none" src="random IpLogger url">

this would log the Ip of every user that opens the post without any notice

edit: every tag that has the option to use an external source (src="random url") would have to be disabled because of this

yea, i was thinking about that too. but i've seen forums (don't remember quite well), only allows images from certain trusted source like imgbb, imgur. so why not use whitelisting?

that would be the best way, but we already have a way to use images and many other things in BBCode so HTML/CSS would be mostly useless