Control: tags -1 + confirmed On Wed, 2022-02-09 at 03:31 -0400, David Prévot wrote: > Two security issues (XSS) have been fixed in the latest upstream > version. As agreed with the security team, those are not worth a DSA. > > [ Impact ] > Without these fixes, websites are vulnerable to already public XSS > issues. > Please go ahead. Regards, Adam