Probably because css is dynamically generated, as in everything is coded in one language, whether js or whatever is the new old, and then it spits out the whole shit on demand as an html5 soup
Indeed, that's possible.
The CSS generated in the HTML source code is not exactly the same as the CSS code in the editing text fields (the CSS generated in the HTML source code has no /* comments */, all invalid CSS removed, the direct image links instead of %%variables%%, and it lacks some line breaks).
Well it certainly won't let you upload raw text for security reasons, so it passes the whole shit to the shreder in order to remove unnecessary code and unwanted code, evidently
Have you tried add svg image via your css? Because if that works... Well that's a potential security flaw eventually
Something like
body { background-image:
url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='10' height='10'><linearGradient id='gradient'><stop offset='10%' stop-color='%23F00'/><stop offset='90%' stop-color='%23fcc'/> </linearGradient><rect fill='url(%23gradient)' x='0' y='0' width='100%' height='100%'/></svg>");
}
Of course, it does not work.
But I wonder why that filtered CSS is embedded inside the HTML instead of a separate CSS file.
Not that it bothers me, but I would like to know a technical explanation.
(post is archived)