Events Calendar block |raw change

CuBoulder / tiamat-theme

University of Colorado Boulder Drupal 9+ base theme

GNU General Public License v2.0

3 stars 0 forks source link

Events Calendar block |raw change #842

Open jnicholCU opened 4 months ago

jnicholCU commented 4 months ago

|raw needs to be removed from the rendering of this block |render should work for the logic check |t should work for the embed rendering

timurtripp commented 1 month ago

It's potentially vulnerable to XSS attacks as it is now, and with our sites all on the same root domain we definitely don't want that. Let's get this fixed before migration. Moving to todo.