Closed LENpolygon closed 2 years ago
Either fix it or explain somewhere that these symbols can't be used due to looking too much like HTML.
Updated the Sanitize and convert script to allow & symbols; which in turn allows symbols such as > and <.
Did some basic XSS testing and saw no flaws, so pushed live:
Some additional verification by a pro would be nice.
Suggestion by o11899nine on Reddit: