You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Some theme components allow users to add svgs with unlimited height attributes, and this can affect the availability of subsequent replies in a topic. Most Discourse instances are unaffected, only instances with the svgbob or the mermaid theme component are within scope.
Patches
The issue is patched in the latest stable, beta and tests-passed version of Discourse.
Impact
Some theme components allow users to add svgs with unlimited
height
attributes, and this can affect the availability of subsequent replies in a topic. Most Discourse instances are unaffected, only instances with the svgbob or the mermaid theme component are within scope.Patches
The issue is patched in the latest stable, beta and tests-passed version of Discourse.
Workarounds
Disable or remove the relevant theme components.