- 🇨🇦Canada NickDickinsonWilde Victoria, BC (T'So-uke lands)
I agree that should support rendering the HTML that is allowed in the field. However the patch as is will expose an xss vulnerability - easy test... if you can enter
<script>alert("xss");</script>as the tab title and have a JS alert pop up things are not good. |raw is risky. - 🇨🇦Canada NickDickinsonWilde Victoria, BC (T'So-uke lands)
Okay... fixed.
Also significantly simplified things however one fly in the ointment... PR for it and documented it https://github.com/matthiasott/a11y-accordion-tabs/pull/19 - Status changed to Fixed
over 1 year ago 2:10pm 27 March 2023 -
NickDickinsonWilde →
committed 06ffb412 on 2.0.x
Issue #3268361 by smustgrave, NickDickinsonWilde: Panel tabs rendering...
-
NickDickinsonWilde →
committed 06ffb412 on 2.0.x
Automatically closed - issue fixed for 2 weeks with no activity.