Files
Aurora.3/code/modules/admin/view_variables
Erki fabd8c4d44 Revert "Apostrophe Bugfix: Plastic Variables (#6547)" (#6549)
Reverts #6547

This introduces an HTML-injection attack. You can inject arbitrary HTML code into character names and have it be executed upon examining someone.
2019-06-09 17:26:29 +03:00
..