When visiting a repo, scripts in the readme get executed
The markdown rendering of a read me seems to be susceptible to code injection.
example readme:
<!DOCTYPE html>
<html>
<body>
<script>alert('haxed')</script>
</body>
</html>
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Anton Gogolev on 07 Feb, 2016 05:14 PM
Thanks a lot!
This is fixed in 1.9.6:
https://hglabhq.com/download/1.9.6