11

I received a comment reply on this topic. Since it was like this, I though the comment was deleted or something like that, but then I noticed the topic title has HTML tags. These tags are being processed on the inbox resulting in:

comment on without ?

@BrunoLM: a slight grayish (#222) bold?

But it should be

comment on <del> without <ins>?

@BrunoLM: a slight grayish (#222) bold?
2
  • 4
    This could make XSS possible.
    – kennytm
    Sep 25 '10 at 6:25
  • 5
    To close voters: the issue was fixed, not no longer reproducible. That close reason is intended for ephemeral issues that resolve themselves after a short while, not for actual bugs that are later marked completed. The status-completed tag is enough. Aug 10 '19 at 0:02
9

oops! thanks for catching that. definitely serious; fixed.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .