Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://gh.wpcy.net/https://github.com/discourse/discourse.git synced 2026-05-03 20:07:47 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-graphviz/assets/javascripts/initializers
History
Exact
Penar Musaraj 472f9e1f78 SECURITY: Sanitize graphviz SVG anchor links to prevent XSS 
Graphviz can generate SVG output with anchor elements containing
arbitrary URLs specified by users. This change implements server-side
sanitization to allow only http and https URLs.
2026-03-19 15:21:28 +00:00
..
discourse-graphviz.js SECURITY: Sanitize graphviz SVG anchor links to prevent XSS 2026-03-19 15:21:28 +00:00