bugs.python.org already sanitizes the ok_message and Ezio already posted a patch to the upstream bug tracker, so I don’t see what else we could do. Also note that the Firefox extension NoScript blocks the XSS in this case. Regards
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4