tim/xxx
1
0
Fork 0
Code Issues Pull Requests Releases Activity
78 Commits 2 Branches 0 Tags
main
Commit Graph
2 Commits
Author SHA1 Message Date
tim a9daa6a792 Replace TinyMCE 4.2.8 with a small local editor. 
TinyMCE 4.2.8 has known XSS bugs. publish/editor.js has the same toolbar
and writes the same HTML. The textarea still posts the story.
 2026-09-25 22:58:05 +02:00
tim 00e1829f8b Escape story fields and clean story HTML with HTML Purifier. 
Add HTML Purifier 4.19.1. Stories are purified when they are saved and
when they are shown.
 2026-09-25 21:34:10 +02:00