Page MenuHomePhabricator

<a> and <style> tags added by VE
Closed, ResolvedPublic

Description

In this edit, VE added <style> with CSS code and <a> tags.

The <a> tags are forbidden and I doubt the style tags should be used with CSS inside.

Event Timeline

NicoV raised the priority of this task from to Needs Triage.
NicoV updated the task description. (Show Details)
NicoV subscribed.
Jdforrester-WMF added a project: Parsoid.
Jdforrester-WMF set Security to None.
Jdforrester-WMF subscribed.

How did this make it past Parsoid?

Jdforrester-WMF claimed this task.

Probably fixed alongside T97280.