The CSS sets a fixed width of `960px` for the `main` element. This overrides the responsiveness intended by the viewport meta tag, causing horizontal scrolling on mobile devices or small windows.
Affected files: index.html
Signed-off-by: tryboi <270171460+tryboi@users.noreply.github.com>
The `changeCSS` function constructs a URL by interpolating user-controlled input (`theme` parameter from the `<select>` element) directly into a CDN URL template. While the current `<select>` restricts values, if the function were called programmatically (e.g., via browser console or if the DOM is manipulated), an attacker could inject an arbitrary path into the stylesheet URL, potentially loading a malicious CSS file from the CDN.
Affected files: index.html
Signed-off-by: Trần Bách <45133811+barttran2k@users.noreply.github.com>
