mirror of
https://github.com/discourse/discourse.git
synced 2025-02-24 02:46:25 +08:00

The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings.
The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings.