4 ms·
Nice idea, but seems to lack of any input escaping. => Humanize.truncatechars("<script>alert('yo');<\/script>", 30) "<script>alert('yo');</script>"
by sirn 15y ago
Nice idea, but seems to lack of any input escaping.
=> Humanize.truncatechars("<script>alert('yo');<\/script>", 30)
"<script>alert('yo');</script>"
=> Humanize.linebreaks("<script>alert('yo');<\/script>")
"<p><script>alert('yo');</script></p>"
Bug filed.
- mvrekic 15y agoThanks. I am on it.