Skip to content

Conversation

@jasonvarga
Copy link
Member

This fixes an issue where the user tag's hidden form fields could contain unescaped values.

@jasonvarga jasonvarga merged commit c4ebf3a into 5.x Jul 25, 2025
26 checks passed
@jasonvarga jasonvarga deleted the user-tag-xss branch July 25, 2025 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants