Closed buro9 closed 3 years ago
A regression of #56 occurred in which the use of ToLower allowed a Cyrillic upper-case I to be sanitised to a standard ASCII i and this would then permit SCRIPT tags to be injected.
A regression of #56 occurred in which the use of ToLower allowed a Cyrillic upper-case I to be sanitised to a standard ASCII i and this would then permit SCRIPT tags to be injected.