If user select html as filter for the chatroom, shall we still filter <script> tag? Otherwise there is a possible XXS attack

Comments

andyhu’s picture

andyhu commented
Issue summary: View changes

change

Anonymous’s picture

Anonymous (not verified) commented
Status: Active » Closed (works as designed)

nope. if the user wants that filter, they get that filter.

Anonymous’s picture

Anonymous (not verified) commented
Issue summary: View changes

change the saying