# Need proofread of this advise about using theme preview
**URL:** https://meta.discourse.org/t/need-proofread-of-this-advise-about-using-theme-preview/151757
**Category:** Development
**Created:** [May 17, 2020, 4:16pm UTC](https://meta.discourse.org/t/need-proofread-of-this-advise-about-using-theme-preview/151757 "2020-05-17T16:16:41Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@EricGT](https://meta.discourse.org/u/EricGT)
#### Post date: [May 17, 2020, 4:16pm UTC](https://meta.discourse.org/t/need-proofread-of-this-advise-about-using-theme-preview/151757/1 "2020-05-17T16:16:41Z")
In helping another admin on our site I gave the following advise, but not sure it is 100% correct. Can those who known just proof read it and let me know if any part of it is wrong.
This is in the context of using the theme preview button.
> Since themes are just CSS and JavaScript running after the text for the post has been returned from the SQL query and does not update the database, AFAIK it is totally safe, the worse I expect you can do is mess up the single HTML page you are previewing.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [May 18, 2020, 5:40am UTC](https://meta.discourse.org/t/need-proofread-of-this-advise-about-using-theme-preview/151757/2 "2020-05-18T05:40:15Z")
Unfortunately themes are not 100% safe. Preview will be running in the context of the admin account and it can make AJAX calls to all sorts of routes.
Someone malicious can do quite a lot of damage with a theme, it would be very obvious by looking at the source code, but it is technically possible.
---
### Author:  [@EricGT](https://meta.discourse.org/u/EricGT)
#### Post date: [May 18, 2020, 11:16am UTC](https://meta.discourse.org/t/need-proofread-of-this-advise-about-using-theme-preview/151757/3 "2020-05-18T11:16:38Z")
Thanks,
I should have noted for the context that he is forking the [Linkify words in post](https://meta.discourse.org/t/linkify-words-in-post/82193) to work with the Prolog [reference manual](https://www.swi-prolog.org/pldoc/doc_for?object=manual) so that when a [predicate indicator](https://www.metalevel.at/prolog/concepts) is used (`[module:]name{/|//}arity?`) it will link directly to the predicate, e.g. [append/3](https://www.swi-prolog.org/pldoc/doc_for?object=append/3)
I don’t see him adding malicious AJAX calls but it is nice to know to look for this when downloading themes created by others. 😃
The communication on the component development is in a public [post](https://swi-prolog.discourse.group/t/added-linkify-words-in-post-theme/2352) for those interested.