This looks legitimate to me. My typical comments on finding time to actually fix the root cause of this by properly rendering template snippets rather than trying to do ad-hoc sanitization still apply. The underlying framework CAN help us avoid these problems, but Horizon as written isn't allowing it to do so.
This looks legitimate to me. My typical comments on finding time to actually fix the root cause of this by properly rendering template snippets rather than trying to do ad-hoc sanitization still apply. The underlying framework CAN help us avoid these problems, but Horizon as written isn't allowing it to do so.