Post #3226163

@sash@hachyderm.io Nice find, work and writeup! Escaping things and having a sane CSP policy is such a hard thing for crap-coded things…. because with a proper CSP this would not have been such a big issue; of course, properly escaping things is the better route…