mirror of
https://github.com/discourse/discourse.git
synced 2025-01-06 09:53:53 +08:00
a373bf2a01
Non-markdown tags weren't being escaped in chat excerpts. This could be triggered by editing a chat message containing a tag (self XSS), or by replying to a chat message with a tag (XSS). Co-authored-by: Jan Cernik <jancernik12@gmail.com>
10 lines
270 B
Handlebars
10 lines
270 B
Handlebars
<TopicStatus @topic={{this.item}} @disableActions={{true}} />
|
|
<div class="topic-title">{{replace-emoji this.item.title}}</div>
|
|
<div class="topic-categories">
|
|
{{bound-category-link
|
|
this.item.category
|
|
recursive=true
|
|
hideParent=true
|
|
link=false
|
|
}}
|
|
</div> |