A xss on the newest version #3007
Description
XSS
There is a xss in the newest version via a label named mermaid
When we insert codes like this:
graph LR
id1["<iframe src=javascript:alert('xss')></iframe>"]
we can see there is a xss in the latest version.
IssueHunt Summary
amedora has been rewarded.
Backers (Total: $40.00)
boostio ($40.00)
Submitted pull Requests
Tips
- Checkout the Issuehunt explorer to discover more funded issues.
- Need some help from other developers? Add your repositories on IssueHunt to raise funds.
IssueHunt has been backed by the following sponsors. Become a sponsor