Disallowing JS or sandboxing it with use of CSS classes like
<div class="myClass onclick"></div>
OR
<div class="myClass" onclick="starfall.onclick(args)"></div>
and internally making use of DHTML.AddFunction
And allowing only minimal SF -> JS interactions like adding/removing classes or elements
Even when HTML would be stripped down to minimum, divs text etc and maybe some crazier stuff with appropriate perms like img tags.
Disallowing JS or sandboxing it with use of CSS classes like
<div class="myClass onclick"></div>
OR<div class="myClass" onclick="starfall.onclick(args)"></div>
and internally making use of DHTML.AddFunction And allowing only minimal SF -> JS interactions like adding/removing classes or elementsEven when HTML would be stripped down to minimum, divs text etc and maybe some crazier stuff with appropriate perms like img tags.
https://wiki.garrysmod.com/page/Category:DHTML