mirror of
https://github.com/discourse/discourse-placeholder-theme-component.git
synced 2026-09-17 15:42:13 -04:00
We were failing to correctly escape content which we would then inject in the HTML of the post causing an XSS. Note this XSS is stopped by CSP.