6958 2014-11-12 18:38:14 +0000 Clean up user input before saving in database 2015-03-31 13:57:30 +0000 1 1 7 Build System, Metadata & Runtime Toaster toaster unspecified x86 Multiple VERIFIED INVALID Medium+ normal 1.8 M3 1 michael.g.wood michael.g.wood alexandru.c.georgescu alexandru.damian belen.barros.pena bluelightning cristiana.voicu stanciux.mihail --- --- No (bug/feature does not impact docs) oldest_to_newest 46957 0 michael.g.wood 2014-11-12 18:38:14 +0000 Any data coming in from the user should be cleaned for html tags and other problem characters before being stored in the database. 48829 1 michael.g.wood 2015-02-13 17:36:40 +0000 After some further investigation I don't think this layer in the stack is where we would have issues. The template engine will escape the context and all we'll gain are with issues where data is double escaped. 49976 2 stanciux.mihail 2015-03-31 13:57:30 +0000 Verified.