Properly escaping fullname
To prevent XSS attacks, we now properly escape any string containing the user's fullname. Enumerated by searching webview.py for "fullname", and "git grep"-ing any occurrences. This also exposed some unused strings, which I deleted for clarity.
Showing
Please
register
or
sign in
to comment