search

gelnior / newebe

Distributed Social Network made with Python
newebe.org
Other
105 stars 19 forks source link

Do not allow js execution when a post is rendered #32

Closed gelnior closed 10 years ago

gelnior commented 11 years ago

This runs an alert:

<p>"&gt;<script>alert(1);</script>&lt;!--</p>
gelnior commented 10 years ago

fixed