mirror of
https://github.com/discourse/discourse-placeholder-theme-component.git
synced 2025-02-10 05:24:50 +00:00
We were failing to correctly escape content which we would then inject in the HTML of the post causing an XSS. Note this XSS is stopped by CSP.