David Edmundson <> changed:

           What    |Removed                     |Added
                 CC|                            |

--- Comment #1 from David Edmundson <> ---
Klipper is sending a table as text. See Klipper::cycleText

They aren't HTML tags that were ever permissable in the notification
specification. Klipper is in the wrong.

Since 5.12 we filter to only the tags that are allowed.

>From a security POV, we could re-allow the table with the attribute filtering
we now have and it'd be safe. But I don't know if I want to.

You are receiving this mail because:
You are watching all bug changes.

Reply via email to