This is a snapshot of Indico's old Trac site. Any information contained herein is most probably outdated. Access our new GitHub site here.

Opened 5 years ago

Closed 5 years ago

#389 closed defect (duplicate)

Sanitization check improvements.

Reported by: lsyroka Owned by: lsyroka
Priority: very low Milestone: v0.97.0
Component: General Version: 0.97.0
Keywords: Cc:

Description

User's input security checks uses tags blacklisting instead of using a whitelist. Some harmful tags are not cleaned e.i. 'embed'. Moreover tags' attributes and their values are not checked.

Change History (4)

comment:1 Changed 5 years ago by lsyroka

  • Status changed from new to accepted

comment:2 Changed 5 years ago by lsyroka

  • Status changed from in_work to in_merge

comment:3 Changed 5 years ago by lsyroka

duplicated 395

comment:4 Changed 5 years ago by jbenito

  • Resolution set to duplicate
  • Status changed from in_merge to closed
Note: See TracTickets for help on using tickets.