Released vibe-core 1.0.0 and vibe.d 0.8.0

Sönke Ludwig via Digitalmars-d-announce digitalmars-d-announce at puremagic.com
Sun Jul 16 03:36:26 PDT 2017


Am 16.07.2017 um 11:17 schrieb Sönke Ludwig:
> (...)
>
> However, I just noticed that this is still possible to exploit in the
> Markdown processor. User defined HTML is filtered, but link targets are
> passed to the rendered HTML as-is (just HTML encoded).

https://github.com/rejectedsoftware/vibe.d/pull/1846


More information about the Digitalmars-d-announce mailing list