XSS in href attribute, issue a warning

[m1212e]

As stated in this issue, Sveltekit might be the right place to adress this.

[benmccann]

@pngwn can you clarify what you had in mind in terms of SvelteKit doing about it?

[pngwn]

No idea. But if we are going to solve this then we should be doing it in kit. I'll have a think.

[benmccann]

You can address this with a content security policy (CSP): #93

I'm going to close this given that there's no concrete proposal for what we might do besides that