lruiz/MarkdownPapers — Issue #20: Javascript Injection
Author: sbordes
Created: 2012-02-29 07:34:40+00:00
State: open

It's possible to inject malicious javascript code into markdown text.

You should avoid the possibility to use script tag and all event attributes (onXXXX)

Bla Bla