Sanitize the 502 page #19

closed cmc opened this on 2026-09-11 02:07 UTC

Discussion

cmc 2026-09-11 02:07 UTC

Error in app/util.go writes the upstream error, including the full CloudFront block page, into an <h3> unescaped. Truncate to one line and escape. Folds into 2.1 if done together.

Roadmap item 2.7, size S. See ROADMAP.md.

closed by commit 35d16226b9 by cmc: Escape everything rendered from user or DeviantArt input

2026-09-11 15:13 UTC