Discussion messages injection #59
Description
The React Markdown doesn't strip out everything that it should when HTML is included.
<img src="x" onerror="this.style.border='5px solid red'; this.style.backgroundColor='yellow';">{{ message }}
The React Markdown doesn't strip out everything that it should when HTML is included.
<img src="x" onerror="this.style.border='5px solid red'; this.style.backgroundColor='yellow';">