post.text_post.TextPost XSS #16

Open

opened

on May 16, 2013

很多地方直接使用了innerHTML，比如在enterDisplayMode里。

之后都换成soy template就可以自动escape了

（谭神找到的）

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests