View Topic

You guys allow any image from any URL, resulting in a possible alert from using urls like: "javascript:alert(1)". While I have not tested this yet, it could lead to some issues.
Modification: No results yet, but you can upload SVG and other files that can be manipulated to do bad things.

Thanks for the report!

While technically the form will take just about anything, due to the way the field data is sanitized and encoded it shouldn't allow anything malicious to happen.

Ah, okay. I just wanted to make sure with you. Thanks.

I appreciate your vigilance.