mirror of
https://github.com/discourse/discourse.git
synced 2026-08-27 13:47:28 -05:00
The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings.
The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings.