Open meyer59 opened 1 year ago
After debugging app.js, it seems this translation from cloudinary is causing the issue :
'title_uploading_with_counter' => 'Uploading {{num}} Assets',
https://cloudinary.com/documentation/upload_widget#localization
it's not escaped by the frontend and it's executed as js, and it does not find a num variable
It also means it's possible to inject js code with translations when doing something like {{alert('test')}}
Describe the bug A clear and concise description of what the bug is. Unable to show the translation, the page show up for a few second and then everything disapear. A js bug appear in the console.
To Reproduce Steps to reproduce the behavior: update to the latest version F5 the page. The page show up for 1-2 sec and then blank (screenshot bellow) Expected behavior A clear and concise description of what you expected to happen.
Screenshots![image](https://user-images.githubusercontent.com/9505463/192166261-4319da03-f681-4f8f-ae26-fda88cff46a0.png)
Desktop (please complete the following information):