wetnoodle to Fediverse@kbin.social · 1 year agoMultiple lemmy instances are getting hit with a js injectionmessage-squaremessage-square23fedilinkarrow-up180arrow-down10file-text
arrow-up180arrow-down1message-squareMultiple lemmy instances are getting hit with a js injectionwetnoodle to Fediverse@kbin.social · 1 year agomessage-square23fedilinkfile-text
minus-squareIHeartBadCode@kbin.sociallinkfedilinkarrow-up12·1 year agoIssue 1895 opened and patch purposed for the core issue. The markdown editor does no escaping input on custom emojis. This is likely why users on app were seeing text and not getting the redirect.
minus-squareHarkMahlberg@kbin.sociallinkfedilinkarrow-up2·1 year ago“And I hope you learned to sanitize your database inputs.” (Man this one is old.)
Issue 1895 opened and patch purposed for the core issue. The markdown editor does no escaping input on custom emojis. This is likely why users on app were seeing text and not getting the redirect.
🙃
“And I hope you learned to sanitize your database inputs.” (Man this one is old.)