Closed Drumm- closed 11 years ago
Not a major bug. But you know somebody is going to be able to exploit this: https://github.com/dcwatson/bbcode/blob/master/bbcode.py#L137 is not secure. I can do [color=red; font-size: 1000px]Blah[/color] for example.
Thanks for the report. I'll push out a new version shortly.
Cheers mate.
1.0.12 pushed to PyPI.
Not a major bug. But you know somebody is going to be able to exploit this: https://github.com/dcwatson/bbcode/blob/master/bbcode.py#L137 is not secure. I can do [color=red; font-size: 1000px]Blah[/color] for example.