[Workaround] <tinyboard> tags show in HTML-mode comments #65

Open
opened 1 year ago by discomrade · 0 comments
Collaborator

Steps to reproduce:

  1. Create new reply with flag
  2. Edit post, make it 'raw HTML' mode and submit
  3. Observe the text (flag names) is contained in the post

Workaround: Add the following CSS to hide the tags. They still exist. At this point in time, I believe the only potentially senitive information that can be put in tags are "proxy" and flag country name.

tinyboard{
    display:none;
}
Steps to reproduce: 1) Create new reply with flag 2) Edit post, make it 'raw HTML' mode and submit 3) Observe the <tinyboard> text (flag names) is contained in the post Workaround: Add the following CSS to hide the tags. They still exist. At this point in time, I believe the only potentially senitive information that can be put in tags are "proxy" and flag country name. ``` tinyboard{ display:none; } ```
discomrade referenced this issue from a commit 1 year ago
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
There is no content yet.