[Bug]1.50.00 Allows HTML [Solved]

Okay, I kinda discovered this through [Bug]Formatting issues with <>. But the issue is kind of concerning enough to warrant another topic.

I can’t imagine this is intended. I don’t think it’s potentially harmful, but. I don’t want to see what can be done with this.

Innnnteresting. Mirr opened https://github.com/mucklet/mucklet-client/issues/123

1 Like

Interesting indeed!
And thanks for the report!

A bug introduced in v1.50.0 has caused the escaping to stop working.
This can be serious, as it allows someone with malicious intent to inject javascript that can be used for all kind of nefarious purposes.

I will patch it as soon as possible!

Fixed in release v1.50.1.

2 Likes