Robin Berjon @robinberjon · 6 Aug 2016 Replying to @jaffathecake CSP has the tech, but I’m thinking more of «use this magic string with all user SVG, and you’ll be safe». @AmeliasBrain
