Menu icon Foundation
Forum attempts to render HTML in post

Foundation's forum attempts to render the HTML that was included. Not sure if you guys have any security measures in place, but that's a big issue.

Should at least be automatically be doing a replacement of with `<`, `>` so it at least renders as text instead of trying to render as HTML.


test

forumbug

Foundation's forum attempts to render the HTML that was included. Not sure if you guys have any security measures in place, but that's a big issue.

Should at least be automatically be doing a replacement of with `<`, `>` so it at least renders as text instead of trying to render as HTML.


test

This post has been closed. No new replies can be added.

Harrison Heck over 5 years ago

Testing if JS is also rendered

alert('This is a test');

Looks like <script></script> is at least replaced with <p>.

Rafi Benkual over 5 years ago

Thanks, we'll take a look!