This is a follow-up to https://www.drupal.org/sa-contrib-2022-034, where we identified that the same vulnerability does not exist in Backdrop core. We would like to include the same sanitization tests, so that we can continue to test sanitization against any future changes to link handling.
GitHub Issue #:
5613
Recent comments
there is no error, it gently renames the file
How to upload js and gz files
Could be a trivial thing like Permissions -> Access administration bar (for a role)?
User seeing admin stuff
Can you paste or screenshot the error you encounter?
How to upload js and gz files