Allow arbitrary CSS in pages
Allow user JS