joethei / obsidian-rss

Read RSS Feeds from inside Obsidian
GNU General Public License v3.0
395 stars 23 forks source link

Dataview XSS fixes #71

Closed phibr0 closed 2 years ago

phibr0 commented 2 years ago

This will use the Dataview Settings to get the correct prefixes for inline queries.

:warning:: This is not fully tested since I didn't find the RSS Feed with the vulnerability in it.

joethei commented 2 years ago

For testing this I have created my own RSS feed: https://ghost.joethei.de/rss/

Thank you for improving my code.