This is a follow-up to https://www.drupal.org/sa-contrib-2022-034, where we identified that the same vulnerability does not exist in Backdrop core. We would like to include the same sanitization tests, so that we can continue to test sanitization against any future changes to link handling.
GitHub Issue #:
5613
Recent comments
Is there any input filter around or should the TinyMCE Uploader manually be hooked to be processed by the File Hash or Path module(s)? I'm not aware of any input filter - the...
File hashing uploads made through TinyMCE
Hi. Did you run the site updates (i.e. at /core/update.php) after updating the module? That version includes changes to the database that should provide that setting (Show title) with a...
Viewfield error on updating to latest version
Hi Paucku I'm afraid not. Backdrop Live is just that - live, not recorded as this encourages greater engagement from people who do not wish to be recorded. What we sometimes do is if...
Backdrop Live November 2025