This repository has been archived by the owner on Jan 6, 2023. It is now read-only.

Ensure pad has scripting disabled #44

Closed

ghost opened this issue Jun 15, 2017 · 1 comment

Milestone

ghost commented Jun 15, 2017

We should make sure people can't paste in onclick handlers or anything. Maybe CSP rules could apply or using the sandbox tag?

ghost added the security label

vladikoff modified the milestone: Launch

Contributor

vladikoff commented Jun 15, 2017

No <script> support slab/quill#1375

vladikoff mentioned this issue

Set an allow list of pasted formats #53

Merged

vladikoff closed this as completed in #53

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.