post.text_post.TextPost XSS #16

Open

opened

on May 16, 2013

很多地方直接使用了innerHTML，比如在enterDisplayMode里。

之后都换成soy template就可以自动escape了

（谭神找到的）

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests