homotopy-io / homotopy-rs

A Rust/WASM implementation of homotopy.io
https://homotopy.io
BSD 3-Clause "New" or "Revised" License
76 stars 5 forks source link

LaTeX injection bug #1366

Open robertmaxton42 opened 3 months ago

robertmaxton42 commented 3 months ago

I hesitate to actually call this a 'vulnerability' or anything, but -- if you start a LaTeX math input with $ in an item name and forget to close it, if the program generates an inverse for you or the like the inverse will show up in LaTeX variable font.