Skip to content

Add filter to wiki content to prevent JavaScript code injection

Mario requested to merge anaqreon:1.8RC into 1.8RC

Created by: anaqreon

While fixing a bug that prevented proper display of HTML characters in a wiki page, I introduced the ability to save arbitrary JavaScript code with the page. This update applies the purify_html() function to the content when generating a preview as well as when saving the page.

Merge request reports