5 ms·
Posting something like `<script type="text/javascript">alert('hello')</script>` creates a blank comment instead of safely HTML encoding the text.
by byte1918 8y ago
Posting something like `<script type="text/javascript">alert('hello')</script>` creates a blank comment instead of safely HTML encoding the text.