http://api.stackexchange.com/docs/types/answer says the can_flag
field is unchanged in unsafe filters. It's probably meant for the field above it: body_markdown
.
-
2Makes you wonder what the point of having "safe" filters is, if all the body fields are "unchanged in unsafe filters". Those fields being the ones that are especially of concern for script (and HTML) injection.– Brock AdamsJan 23, 2017 at 18:16
Add a comment
|