CVE-2021-43827

discourse-footnote is a library providing footnotes for posts in Discourse. Impact When posting an inline footnote wrapped in tags e.g. ^footnote, the resulting rendered HTML would include a nested , which is stripped by Nokogiri because it is not valid. This then caused a javascript error on top...

PT-2021-23959

Name of the Vulnerable Software and Affected Versions: discourse-footnote versions prior to 0.2 Description: The discourse-footnote library has an issue where posting an inline footnote wrapped in tags results in a nested in the rendered HTML, which is stripped by Nokogiri due to its invalidity...

CVE-2021-43827: Improper Handling of Exceptional Conditions

discourse-footnote is a library providing footnotes for posts in Discourse. Impact When posting an inline footnote wrapped in tags e.g. ^footnote , the resulting rendered HTML would include a nested , which is stripped by Nokogiri because it is not valid. This then caused a javascript error on...