Skip to content

Escape and allowlist embedded image data URLs to prevent stored XSS - #370

Merged
daaain merged 5 commits into
mainfrom
fix/image-xss-277
Nov 4, 2026
Merged

Escape and allowlist embedded image data URLs to prevent stored XSS#370
daaain merged 5 commits into
mainfrom
fix/image-xss-277

Test the HTML image sinks' escaping on its own

48f29bb
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar