Skip to content

XSS for text input, text node, and incorrect Number input parsing #67

Open
@lifeart

Description

@lifeart

for text input -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives an XSS issue,
for text node in template -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives an XSS issue,
for number input -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives eee12e result

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions