> Also HTML/CSS is not code that is executed or interpreted, it's a > markup language, a description of a document. Plugins are also not > remote arbitrary code execution, they are local code execution, code > you have control over.
Last time I checked, CSS is turing complete
