This repository has been archived by the owner on Mar 18, 2021. It is now read-only.

State shouldn't contain html #1

Open

bestwestern opened this issue Dec 19, 2018 · 0 comments

bestwestern commented Dec 19, 2018

messages should be an array.
What happens if a user sends

<script> alert('fds'); </script>

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.