We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hi Craig 😃 ,
malicious inputs are not sanitized when using align-tag.
The input
[align=left css-selector]sadsad[/align]
results in
<span class="bb-ruby_align_left css-selector" style="float:left css-selector;">sadsad</span>
That means, I can pass every css selector which can results in a destroyed page layout.
The text was updated successfully, but these errors were encountered:
Please submit a pull request with a tested fix and I'll issue a new release.
Sorry, something went wrong.
closing due to lack of follow-up
No branches or pull requests
Hi Craig 😃 ,
malicious inputs are not sanitized when using align-tag.
The input
results in
That means, I can pass every css selector which can results in a destroyed page layout.
The text was updated successfully, but these errors were encountered: