This isn't a security bug, because only admins can create user fields and we have to trust admins, because they can change themes, which are shown site-wide and can contain unrestricted JS. |
||
|---|---|---|
| .. | ||
| assets | ||
| controllers | ||
| helpers | ||
| jobs | ||
| mailers | ||
| models | ||
| serializers | ||
| services | ||
| views | ||