Hmm instead of turning off all clicks can you try commenting out ajaxifyAnchors(); in public/src/ajaxify.js
" within category-descriptions/-titles
-
It seems like
"
results in some issues if it gets used within category-description or -title because it doesn't get escaped when showing within admin-page even so it works correct on user-scope.Just try
"><a>test</a>
within the description or title... -
Looks like we need
data.title = validator.sanitize(data.title).escape();
like we do for topic titles.