From 03e0679349075402cdccb6dab8d20240b9075e95 Mon Sep 17 00:00:00 2001 From: Elointz <25982103+Elointz@users.noreply.github.com> Date: Tue, 5 Feb 2019 16:09:11 +0100 Subject: [PATCH] Added knockout (https://knockoutjs.com/) Detect https://github.com/knockout/knockout/issues/1244 --- repository/jsrepository.json | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/repository/jsrepository.json b/repository/jsrepository.json index 5c75e02b..44e2e2bf 100644 --- a/repository/jsrepository.json +++ b/repository/jsrepository.json @@ -355,6 +355,24 @@ "hashes" : {} } }, + "knockout": { + "vulnerabilities" : [ + { + "below" : "3.5.0-beta", + "severity": "medium", + "identifiers": {"summary": "XSS injection point in attr name binding for browser IE7 and older"}, + "info" : [ "https://github.com/knockout/knockout/issues/1244" ] + } + ], + "extractors" : { + "func" : [ "ko.version" ], + "filename" : [ "knockout-(§§version§§)(.min)?\\.js"], + "filecontent" : [ + "\\* Knockout JavaScript library v v(§§version§§)" + ], + "hashes" : {} + } + }, "sessvars": { "vulnerabilities" : [ {