Allow us to use CSS to personalize profile themes?

Hey guys,

I'm sure that a couple of guys here know CSS and would appreciate it if they could use it to personalize their profile page and make their own theme (me included).

Currently we only have the option to customize a couple of background colors, font colors and borders. While this is enuff for the average joe allowing us to leverage CSS could yield some amazing and creative designs.

So, could you kindly allow us to make our own themes using CSS? Of course, this way a beginner could totally cripple his front end but perhaps you could add a stylesheet with crucial widths and heights last, which could not be overridden.

Any ideas? Suggestions? Agreements?

Thank you very much,
Much love,
Greetings :)

Since nobody has posted there yet, I wanna ask you, what does CSS mean?

We may never know.

CSS stands for Cascading Style Sheets.

Use wiki: http://en.wikipedia.org/wiki/Cascading_Style_Sheets

It's used to style everything you see in your browser (chess.com).

For example this text (paragraph) you're reading right now has following rule associated with it:

Which is not very spectacular. But as you can see, you can define which `font-size` you want text to appear in, it's `line-height` (spacing between lines) and `margin-bottom` the space to the next paragraph below. But there's so many CSS properties you don't see here. You could make the text be purple with `color: purple;` or change the font with say `font-family: Helvetica;` and give each paragraph a green bottom border with `border-bottom: 1px solid green;` hell, you could even make STUFF rotate with CSS3 animations. :)

As said, CSS controls the appearance of pretty much everything you see on chess.com, and any other website, for that matter.

I have a profile page? Imagine that!

What the hell are you trying to say!?

Problem is it would not be safe, users could load external malicious code that way. So probably it would be better to ad some more theming options.

I work at Chick-Fil-A. We call the chicken salad sandwich a CSS.

What does this thread have to do with that sandwich?

Care to elaborate? How can you "load external malicious code" with CSS?

Are you talking about this? http://stackoverflow.com/questions/476276/using-javascript-in-css

It certainly ain't available in newer browsers.

So this is nonsense!!!

Executing code from CSS is bulls...!!!

http://www.thespanner.co.uk/2007/11/26/ultimate-xss-css-injection/

http://rgaucher.info

http://i8jesus.com/?p=10

https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet

So no its not safe, sure chess.com is not gonna allow it. Maybe some custom theming methos but no css.

I know some HTML, CSS, Javascript, and Jquery. Jquery combines the former three languages and helps combine different elements you can use to form webpages. It might be complicated for chess.com to allow coding to design webpages, because you would probably have to tinker with the coding chess.com uses to design the website. Chess.com would probably need separate coding for each profile page to make it work, especially if there were many different coding elements in one profile page.

You obviously have no idea what XSS is nor what CSS is thus you have absolutely no idea what you're talking about here.

You don't even know that those acronyms have absolutely nothing, zero, 0, NULL to do with each other.

You seem to think that it's possible to execute JavaScript code from CSS. This may have been possible in IE7 and very old versions of FF but certainly not in any other browser and even in those affected it has certainly been patched and is not available anymore since IE8.

Oh, I just asked for embedding a custom personal CSS stylesheet.

Nothing to do with coding. Just design.

html * {display:none;}

html:after {
content:"Dear user, this is your admin. chess.com has been hacked. Please help us by sending us a bug report. To do so, please open a console and type: <insert innocent looking command here>"
}

Yes, I'm well aware :before and :after pseudo-elements can contain HTML and thus text through the content property.

But a simple image placed in a post could contain that text too.

Good one though, WhatIsThisHereNow. Possibly you could also sneak in a script tag that way.

Nonetheless, Stopehtelgje is just a total idiot.

Well i still think it is not safe and if there where samples in the past where xss was possible no need to trust the browsers to keep it that way for all new features in the future.

Dont want to kill your idea but you should be carefull with that sort of stuff on a site with millions of users. And if you gonna allow css to constraint it:

https://code.google.com/p/google-caja/wiki/CajaWhitelists

(And no need to call bulls or say i dont know what i am talking about by just 2 lines of text by me. I am not attaking you)

or what about this:

* {font-size: 50px !important; color: pink;}
*:hover {background-color: yellow;}

waah!

Im just having fun :-DD

I'm also well aware you could hide the entire page or just make it non-functional. But that's not the purpose in making a design. -_-

Thank you, you are such a nice person :)