Code, CSS & JavaScript fields

These fields intentionally preserve source text because that is their purpose. Pressundo normalizes and stores the text but does not eval or execute it during sanitization/rendering.

If your application later prints or executes user-configured code, that is a separate, high-trust decision and must be secured for your use case.