Sanitize user comments of HTML

Noziro / MediaTracker

EXTREME ALPHA STATE. Track all of your media, from movies, to games, anime, books, and more. Official name TBD.

0 stars 0 forks source link

Sanitize user comments of HTML #26

Closed Noziro closed 4 years ago

Noziro commented 4 years ago

Currently users can insert any HTML into their forum posts and just have it work. This is obviously a security risk, as well as just being ugly. Fix it!

This probably also applies to things such as usernames, so make sure to test this.

Noziro commented 4 years ago

Fixed in 65713af08faf98453a373b8dd3195238a24fd0cb

Just remember to add sanitizing to future user in/outputs.