XSS - Githubissues

bangumi / issues

Official issue tracking for Bangumi.tv

https://github.com/bangumi/issues/issues

24 stars 0 forks source link

XSS #55

Closed protodonuts closed 7 years ago

protodonuts commented 7 years ago

@Sai

补昨天 #54 没测到的两个

小组介绍的 textarea, 只有小组管理员可以看到, 影响小
magi 答案选项 是完全公开的 HTML, 比较危险

Sai commented 7 years ago

Fixed