Open

Description
Here is the situation I encountered:
Ignore how strange the string is, which is Test Engineer's works, once executed, it will fall into an infinite loop.
Even breakpoint debugging can't work.
So I post here for solution.
const remarkable = new Remarkable('full', {
html: true,
xhtmlOut: false,
breaks: false,
langPrefix: 'language-',
linkify: true,
linkTarget: '_blank',
typographer: false,
quotes: '“”‘’',
});
const html = `
<img src=# onerror=’alert(document.cookie)/><!--‘
<img src=https://dn-coding-net-production-pp.qbox.me/63d4c242-e9c4-4b61-9e61-9adad4bb6b15.png />
`;
remarkable.render(html);
Metadata
Metadata
Assignees
Labels
No labels