mirror of
https://github.com/discourse/discourse.git
synced 2024-12-16 15:14:13 +08:00
477bacb3ae
The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings.
14 lines
462 B
JavaScript
14 lines
462 B
JavaScript
export default {
|
|
"/admin/logs/watched_words.json": {
|
|
actions: ["block", "censor", "require_approval", "flag"],
|
|
words: [
|
|
{ id: 1, word: "liquorice", action: "block" },
|
|
{ id: 2, word: "anise", action: "block" },
|
|
{ id: 3, word: "pyramid", action: "flag" },
|
|
{ id: 4, word: "scheme", action: "flag" },
|
|
{ id: 5, word: "coupon", action: "require_approval" },
|
|
{ id: 6, word: '<img src="x">', action: "block" },
|
|
]
|
|
}
|
|
};
|