search

mdcpp / mdoj

Mingdao OnlineJudge, A performant contest management system base on cutting edge stack.
https://mdcpp.github.io/mdoj/
4 stars 1 forks source link

Fix XSS in problem page #74

Open KAIYOHUGO opened 3 weeks ago

KAIYOHUGO commented 3 weeks ago

This is only happened when a user create a problem with script tag in markdown.

Because malicious actor will require a higher privilege such as Root/Admin/Superuser, so this is will not be fix in first release.