-
Notifications
You must be signed in to change notification settings - Fork 11
Swap html/template with text/template #251
Copy link
Copy link
Closed
Labels
A-DynamicbeatRelates to DynamicbeatRelates to DynamicbeatT-EnhancementAdding to the things that already existAdding to the things that already exist
Description
What would you like Scorestack to do better?
Passwords with certain special characters get corrupted by the template code in Dynamicbeat, because we are using the HTML template library, which performs sanitization to prevent some types of attacks.
Do you have any ideas of how that could be improved?
Since we don't need the HTML sanitization functionality, the html/template library should be swapped with the text/template library in Dynamicbeat. Theoretically, these two libraries have an identical interface, but they should still be tested.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
A-DynamicbeatRelates to DynamicbeatRelates to DynamicbeatT-EnhancementAdding to the things that already existAdding to the things that already exist