Hau-Hau / firefox-tab-suspender

A Firefox extension that automatic suspend tabs and saves memory
Other
15 stars 2 forks source link

Bug: Suspending a site with HTML tags in the title results in HTML injection #105

Open lubieowoce opened 3 years ago

lubieowoce commented 3 years ago
Tab Suspender version:  3.7.4
Firefox version:        86.0

Problem description

Tab Suspender will treat <html tags> in site titles as literal HTML instead of escaping them into &lt;html tags&gt;.

Steps to reproduce

Suspend a tab with this StackOverflow question: "Multiple lines of input in <input type=“text” />"

Here's a screenshot of the resulting Tab Suspender page. In case that's not clear, that white box in the title is an actual <input type="text">:

obraz