Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make html-escaping inside embed macro required #8657

Closed
rymsha opened this issue Feb 17, 2021 · 0 comments
Closed

Make html-escaping inside embed macro required #8657

rymsha opened this issue Feb 17, 2021 · 0 comments
Assignees
@rymsha
Labels
Improvement Security Fix for something unsafe
Projects
7.7.0
Milestone
7.7.0

Comments

@rymsha
Copy link
Contributor

rymsha commented Feb 17, 2021

Use of embed macro without encoded html inside is needless - one who can insert unencoded version into macro could instead insert iframe without macro alltogether.
@rymsha rymsha self-assigned this Feb 17, 2021
@rymsha rymsha added this to To do in 7.7.0 via automation Feb 17, 2021
@rymsha rymsha moved this from To do to In progress in 7.7.0 Feb 17, 2021
@rymsha rymsha changed the title Make html-encoding inside embed macro required Make html-escaping inside embed macro required Feb 17, 2021
rymsha added a commit that referenced this issue Feb 17, 2021
@rymsha
Make html-escaping inside embed macro required #8657
e9bef23
rymsha added a commit that referenced this issue Feb 17, 2021
@rymsha
Make html-escaping inside embed macro required #8657
60ae45f
rymsha added a commit that referenced this issue Feb 17, 2021
@rymsha
Make html-escaping inside embed macro required #8657
1dc0910
@rymsha rymsha moved this from In progress to Done in 7.7.0 Feb 18, 2021
rymsha added a commit that referenced this issue Feb 19, 2021
@rymsha
Make html-escaping inside embed macro required #8657
85815df
@rymsha rymsha added this to the 7.7.0 milestone Apr 8, 2021
@rymsha rymsha mentioned this issue May 11, 2021
Closed
@rymsha rymsha added the Security Fix for something unsafe label May 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rymsha rymsha

Labels
Improvement Security Fix for something unsafe
Projects
No open projects
7.7.0
Done
Milestone
7.7.0
Development

No branches or pull requests
2 participants
@rymsha @alansemenov