Currently, the `config` in the codeState in the hash is sanitized for unsafe values, however the `?config` URL parameter or configs loaded from a GitHub Gist are not. Reported-by: Chai Cheng Xun @QiaoNPC
Currently, the `config` in the codeState in the hash is sanitized for unsafe values, however the `?config` URL parameter or configs loaded from a GitHub Gist are not. Reported-by: Chai Cheng Xun @QiaoNPC