2025-01-05 UTC
# 
carrvo[d] I would question why you expect webmentions to inject scripts in the first place. I would expect to only inject safe microformats2 text from the source and a link back to the source. That keeps the destination (of the webmention) secure.