Page MenuHomePhabricator

Escape all the things (FOC)
Closed, ResolvedPublic

Event Timeline

Added a PR https://github.com/wmde/fundraising-backend/pull/355 for the JS side.

All views not affected therein could independently be addressed for the PHP side. /cc @JeroenDeDauw

Tried this on the test system, could not find a problem (despite data sets crafted for this purpose).
But would welcome more UAT by others.

kai.nissen claimed this task.