https://bugs.kde.org/show_bug.cgi?id=390375
David Edmundson <k...@davidedmundson.co.uk> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |k...@davidedmundson.co.uk
--- Comment #1 from David Edmundson <k...@davidedmundson.co.uk> ---
Klipper is sending a table as text. See Klipper::cycleText
They aren't HTML tags that were ever permissable in the notification
specification. Klipper is in the wrong.
Since 5.12 we filter to only the tags that are allowed.
>From a security POV, we could re-allow the table with the attribute filtering
we now have and it'd be safe. But I don't know if I want to.
--
You are receiving this mail because:
You are watching all bug changes.
