A place to test all kind of things.[Random entry]
(solved) Adding </style> with arbitrary html on end of custom css code can trigger xss. Such place must be carefully sanitized where any user input is expected as rn there's no such sanitization whatsoever :\
