atware/scuruto

XSS

Closed this issue · 1 comments

2017-01-17 19 41 51


2017-01-17 19 40 26

It's an assumption of the tool used within an internal organization, so I did not validate strictly.
However, there is no reason to allow the script tag, so we've fixed.
Thanks