In reply to .
Obviously forgot `box-sizing: border-box;` (or a reset stylesheet) here. Little worried about XSS, too (not for myself, but potential future users who might just paste whatever into this field), so I added a CSP that defaults to (and enforces) `self`. For _everything_. (Images are proxied anyway, and all fonts and scripts self-hosted.)
