Hi, thanks for pointing out this issue! I removed all comments of this guy and also changed comments and descriptions to be text-only (i.e. all HTML etc. is escaped). The only drawback is that you can't embed things like soundcloud projects anymore but security is more important here than convenience. Probably there are more areas to fix but for the time being, this should work out.
Best regards Toby ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ Lmms-users mailing list Lmms-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lmms-users
