-
Notifications
You must be signed in to change notification settings - Fork 15
Open
Description
We have registered the plugin following the documentation.
We have our request payload with <script> in it...but blankie is not sanitizing it.
Payload:
fieldName: "<script>alert("hi")</script>"
expected behaviour on sanitization;
fieldName:""
current behaviour:
fieldName: "<script>alert("hi")</script>"
Is this the usual behaviour of blankie or does it sanitize the request payload with inline scripts?
Team, please let me know about the above.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels