a373bf2a01
Non-markdown tags weren't being escaped in chat excerpts. This could be triggered by editing a chat message containing a tag (self XSS), or by replying to a chat message with a tag (XSS). Co-authored-by: Jan Cernik <jancernik12@gmail.com> |
||
|---|---|---|
| .. | ||
| adapters | ||
| components | ||
| connectors | ||
| controllers | ||
| helpers | ||
| initializers | ||
| lib | ||
| models | ||
| modifiers/chat | ||
| pre-initializers | ||
| routes | ||
| services | ||
| templates | ||
| widgets | ||
| admin-chat-route-map.js | ||
| chat-route-map.js | ||
| preferences-chat-route-map.js | ||