Report a Bug
Let's test Decidim and report bugs together
Links in Proposal's body disappear
This proposal has been accepted because:
This incidence has been solved. Closed via #5341.
Thank you for contributing!
List of Endorsements
Report inappropriate content
Is this content inappropriate?
Comment details
You are seeing a single comment
View all comments
I find this a simple solution and fast to apply.
And will avoid us having to take care of all the owasp recommendations: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
On the other way it leaves current proposals with links broken, so it breaks compatibility. To keep compatibility we can apply strip_links prior to strip_tags, and then auto_link: auto_link(strip_tags(strip_links(text)))
Loading comments ...