However, there's some issues with the editor and backend that allow injecting javascript. I was able to do that with the image insert. I suspect the link insert has a similar issue. Seems like you need something to scrub out that sort of thing on submit or display.
However, there's some issues with the editor and backend that allow injecting javascript. I was able to do that with the image insert. I suspect the link insert has a similar issue. Seems like you need something to scrub out that sort of thing on submit or display.
See https://quikpub.co/NPU1KDYKXK