skorotkiewicz/rDrama
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
15272 commits 2 branches 0 tags 829 MiB
Commit graph

3 commits

Author SHA1 Message Date
Michael House
f3a479f991 Removed emoji feature from templates and deleted emoji images 2022-05-18 20:53:28 -05:00
faul_sname
309bf44f12 [#80] Fix XSS vulnerability 
On unmodified themotte, try creating a submission with

```html
<img src="/doesnotexist.png" onerror="alert(1)" />
```

and observe that your browser opens an alert window.
 2022-05-17 19:00:23 -05:00
faul_sname
e1a1277268 [#80] Split marked.js into vendor part and custom part 2022-05-17 19:00:23 -05:00