HTML injection in download #802
Description
On the download page, update the message:
<script>alert("injection!")</script>
The notebooks will contain the injected html.
- Escaping?
- Strip tags?
{{ message }}
On the download page, update the message:
<script>alert("injection!")</script>
The notebooks will contain the injected html.