331 matches found
league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal
Summary The DisallowedRawHtml extension does not escape a disallowed tag when the tag name is the last thing in the raw HTML. A Markdown line containing just /i The trailing character class requires one character after the tag name. The block parser does not: RegexHelper::PARTIALHTMLBLOCKOPEN...
5.8AI score
SaveExploits0References4Affected Software1
20