mirror of
https://github.com/ankitects/anki.git
synced 2025-09-22 07:52:24 -04:00
1c156905f8
The editor already strips script tags from fields, but was allowing through Javascript in things like onclick handlers. We block this now, as the editor context has access to internal APIs that we don't want to expose to untrusted third-party code. |
||
|---|---|---|
| .. | ||
| components | ||
| domlib | ||
| generated | ||
| sass | ||
| sveltelib | ||
| tag-editor | ||
| tslib | ||