Skip to content

Mixed: bot message fix, helpdest, admin tools and sticky messages

Abajur requested to merge Abajur/pomf.tv-templates:merge into main

Sticky messages should be safe despite using $("#motd").html(...). I tested with <a href="sus">test</a> <script>console.log("sus")</script> https://example.com/ :chencool:, HTML got properly escaped.

@Wisp can the MOTD in the database ever contain HTML? I quickly looked around and didn't find anything preventing it.

Merge request reports