html and css parsed but ignored

i need to tweak the header sizes and stuff definitely

if i let ppl use css i think there’s some kinda exploit with javascript urls you can steal cookies with 🤔
perhaps we could get away with using the font element (old school html)

however there’s a couple fun tags such as ins, del, and mark that work