fix XSS vulnerability in readme rendering for txt, md (!89) · Merge requests · Platform / Development / swh-web · GitLab

Staging instance, all changes can be removed at any time

Silent mode is enabled

All outbound communications are blocked. Learn more.

Kalpit Kothari requested to merge generated-differential-D1322-source into generated-differential-D1322-target Mar 30, 2019

While rendering readme, scripts were also being executed. Example - https://archive.softwareheritage.org/browse/origin/https://github.com/kalpitk/test/directory/ and https://archive.softwareheritage.org/browse/revision/8428612a5f8d115deff9463fdff6da62d2fc6091/?origin=https://github.com/kalpitk/test

Migrated from D1322 (view on Phabricator)