leftypol
/
leftypol
4
5
Fork 2
Code Issues 58 Pull Requests 1 Projects Releases Wiki Activity
Labels Milestones
New Issue

[Workaround] <tinyboard> tags show in HTML-mode comments #65

Open
opened 2 years ago by discomrade · 0 comments
discomrade commented 2 years ago
Collaborator

Steps to reproduce:

  1. Create new reply with flag
  2. Edit post, make it 'raw HTML' mode and submit
  3. Observe the text (flag names) is contained in the post

Workaround: Add the following CSS to hide the tags. They still exist. At this point in time, I believe the only potentially senitive information that can be put in tags are "proxy" and flag country name.

tinyboard{
    display:none;
}
Steps to reproduce: 1) Create new reply with flag 2) Edit post, make it 'raw HTML' mode and submit 3) Observe the <tinyboard> text (flag names) is contained in the post Workaround: Add the following CSS to hide the tags. They still exist. At this point in time, I believe the only potentially senitive information that can be put in tags are "proxy" and flag country name. ``` tinyboard{ display:none; } ```
discomrade referenced this issue from a commit 2 years ago
[HACK] Hide <tinyboard> tags in CSS
Zankaria referenced this issue from a commit 5 months ago
[HACK] Hide <tinyboard> tags in CSS
leftypol referenced this issue from a commit 3 months ago
[HACK] Hide <tinyboard> tags in CSS
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
about-theme
block_mass_delete_threads
config
display-appeal-src-ip
dockerize
fix-catalog-hud
fix-hud-dash
gitIgnore1
lazyLoading
mitigate-move-dataloss
safer-thread-move
secure-login
tinyboard_noise
Labels
Apply labels
Clear labels
bug
Something is not working devops
Devops related, rather than software duplicate
This issue or pull request already exists feature proposal
A feature or change that could be implemented feature request
New feature help wanted
Need some help invalid
Something is wrong question
More information is needed wontfix
This won't be fixed
No Label bug devops duplicate feature proposal feature request help wanted invalid question wontfix
Milestone
Set milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Assign users
Clear assignees
No Assignees
1 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Cancel
Save
There is no content yet.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

No
Yes