Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-graphviz/spec
History
Exact
Penar Musaraj 0c861df8be SECURITY: Sanitize graphviz SVG anchor links to prevent XSS 
Graphviz can generate SVG output with anchor elements containing
arbitrary URLs specified by users. This change implements server-side
sanitization to allow only http and https URLs.
2026-03-19 15:46:24 +00:00
..
integration
system