Opened 7 years ago
Closed 7 years ago
#2986 closed defect (bug) (fixed)
Moderation and blacklist word checks can be bypassed by wrapping keys with HTML
Reported by: |
|
Owned by: |
|
---|---|---|---|
Milestone: | 2.6 | Priority: | normal |
Severity: | normal | Version: | |
Component: | API - Moderation | Keywords: | has-patch |
Cc: |
Description
Moderation moderation_keys
and blacklist blacklist_keys
word checks can by bypassed by wrapping parts of the word in HTML, e.g bannedword
can be bypassed using <em>banned</em>word
Change History (1)
Note: See
TracTickets for help on using
tickets.
In 6085: