Madison Williams

Validator isPureTextStrict does not invalidate strings with self-closing or open HTML tags

2

https://github.com/revel/revel/blob/a3d7a7c23ca885cc5036d3641ede49ce4a14ee2e/validators.go#L473:L526 Normal HTML tags are detected just fine, but when a tag is self-closing, such as: `` `` Go undetected. This is a pretty severe XSS security vulnerability.

PureText NORMAL vs STRICT MODE always uses STRICT mode

2

https://github.com/revel/revel/blob/a3d7a7c23ca885cc5036d3641ede49ce4a14ee2e/validators.go#L569:L572 The world's most opinionated Switch statement directs you to PureTextStrict regardless of if you are in PureText NORMAL or PureText STRICT.

allowing the ability to pass a scale parameter so it drags correctly …

11

…at any zoom level

CDK for Allora Node

3

### What does this PR do? 🛑 Please open an issue first to discuss any significant work and flesh out details/direction - we would hate for your time to be...