search

realaravinth / libmedium

An Alternative Medium Frontend | Development continues at: https://git.batsense.net/realaravinth/libmedium
https://libmedium.batsense.net
GNU Affero General Public License v3.0
74 stars 7 forks source link

Prevent XSS #17

Closed xbdmHQ closed 1 year ago

realaravinth commented 1 year ago

Thanks for the patch! Can you please add the following (your change):

<meta http-equiv="Content-Security-Policy" content="script-src 'none'">

below L14 in tests/7158b1cdd50c.html to clear the failing test.

The test renders a post and verifies if it matches the expected rendering.