element-hq / element-hq/element-integration-manager
Etherpad Widget doesn't check if the pad name is allowed
Open
C-Widgets
S-Minor
T-Defect
- Dominant language
- No language data
- Stars
- 11
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
Seems like https://scalar.vector.im is quite strict with the allowed pad names. But it's possible to enter an illegal pad name and embed the pad, which then results in a iframe which cannot get displayed correctly, because the pad url only reports `Such a padname is forbidden`.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.