papereth 2275735fdf Fix information leak in thread.html (#377) ...

Sensitive information can be leaked due to inadequate/absent escaping, if proxy_save enabled

Line 14 is truncating before removing tags, this can cause some tags to be cut and therefore not be removed by the `remove_` functions.
Line 22 is just leaking it all, not removing anything.

2020-08-10 09:50:02 -07:00

4.2 KiB

Raw Blame History

View Raw