Your Admin Panel Renders What Strangers Typed: An XSS We Shipped, and the Fence Around It Now
A contact form field became a clickable link in our admin. Escaping didn't cover it, because an href is not text. What we shipped, and how it's fenced now.
Emyrix Blog
#filament
Every post tagged filament, newest first.
Working through one of these?
Talk to us.
Upgrades, performance work, and emergency support for Magento, Adobe Commerce, Shopware, and custom Laravel builds.