3 ms·
I think there is a big XSS hole in the current front end. There is no escaping of input from email sent to it. Edit: Oops I'm wrong, I think it is escaped on t
by samwillis 15y ago
I think there is a big XSS hole in the current front end. There is no escaping of input from email sent to it.
Edit: Oops I'm wrong, I think it is escaped on the server. How are people including images?
- m1rk00 15y agoEmail attachments?
- kennywinker 15y agoEmail attachments.