mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-05-27 21:44:21 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix slide might trigger script when processing markdown which cause XSS [Security Issue]

Browse source
This commit is contained in:
Wu Cheng-Han 2016-11-26 22:46:08 +08:00
parent 9383df59c9
commit f86a9e0c4b
3 changed files with 12 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

2
public/views/slide.ejs
View file

@ -55,7 +55,7 @@
<body>
<div class="container">
<div class="reveal">
<div class="slides"><%- slides %></div>
<div class="slides" style="display: none;"><%- body %></div>
</div>
<div id="meta" style="display: none;"><%- meta %></div>