This repository has been archived by the owner on Feb 9, 2023. It is now read-only.

Disallow HTML <script> tag #23

Open

axic opened this issue Sep 11, 2020 · 1 comment

Member

axic commented Sep 11, 2020

Currently it is possible to include malicious code 😨

Member Author

axic commented Sep 11, 2020

Actually could just disallow all HTML tags: https://kramdown.gettalong.org/converter/remove_html_tags.html

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.