Andy Madge

Recommended XSS protection htmlDecode() isn't actually safe

1

Even though the DIV never gets attached to the DOM, some browsers will still load images and fire events. See [this comment](http://stackoverflow.com/questions/1147359/how-to-decode-html-entities-using-jquery/2419664#comment6018122_2419664) on Stackoverflow Using a textarea instead of e...

## Description Variable `copy_tags_to_snapshot` ([defined here](https://github.com/terraform-aws-modules/terraform-aws-rds/blob/a76a3cd92220b91eaa467a5328db6f2c21e1fdee/modules/db_instance/variables.tf#L188)): ``` variable "copy_tags_to_snapshot" { description = "On delete, copy all Instance tags to the final snapshot" type = bool default = false } ```...