strukturag / spreed-webrtc

WebRTC audio/video call and conferencing server.
GNU Affero General Public License v3.0
1.1k stars 259 forks source link

Fix XSS in room PIN dialog #386

Closed leonklingele closed 8 years ago

leonklingele commented 8 years ago

Nothing really serious though, as the message was still auto- filtered by Angular. This would not allow to load remote scripts. As we still need to show some un-sanitized messages, we can't fix this in alertify.js directly to force-sanitize all texts.

fancycode commented 8 years ago

lgtm :+1: