Arkango

XSS via href content

5

The bug reported here https://github.com/agusmakmun/django-markdown-editor/issues/173 can be extended to an href content with small syntax changes. ### Steps to reproduce 1. editor insert: [testlinkxss](\" onmouseover=alert(document.domain) l) 2. preview will result...

i would like to create other nodes, which are the default credentials?