<p>The form field for uploading splash page text allows uploading arbitrary files, including binary files which are then displayed without escaping to the user.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br>Reply to this email directly or <a href="https://github.com/opentechinstitute/luci-commotion/issues/420">view it on GitHub</a>.<img alt="" height="1" src="https://github.com/notifications/beacon/3074564__eyJzY29wZSI6Ik5ld3NpZXM6QmVhY29uIiwiZXhwaXJlcyI6MTcyNTI4NzAxMSwiZGF0YSI6eyJpZCI6NDEzMDA3MjN9fQ==--189e3c69797066c617287449a1ca54dc8a5995a7.gif" width="1" /></p>