Non-markdown tags weren't being escaped in chat excerpts. This could be triggered by editing a chat message containing a tag (self XSS), or by replying to a chat message with a tag (XSS). Co-authored-by: Jan Cernik <jancernik12@gmail.com> |
||
|---|---|---|
| .. | ||
| chat | ||
| discourse-details | ||
| discourse-local-dates | ||
| discourse-narrative-bot | ||
| discourse-presence | ||
| lazy-yt | ||
| poll | ||
| styleguide | ||