we should sanitize v-html props in components or remove them · Issue #1930 · bootstrap-vue-next/bootstrap-vue-next · GitHub

8000 we should sanitize v-html props in components or remove them · Issue #1930 · bootstrap-vue-next/bootstrap-vue-next · GitHub

we should sanitize v-html props in components or remove them #1930

Closed

Closed

we should sanitize v-html props in components or remove them#1930

Assignees

Labels

There are many places that accept v-html input and the input isn't sanitized for xss attacks, we leave this to the user. I think we should remove all the v-html places since we have slots everywhere that the user can use to shoot them self in the foot.

Metadata

Assignees

VividLemon

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

0