New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(server): separate initial state for vue #1

Open

azu wants to merge 2 commits into master from ssr-initial-state

Owner

azu commented Aug 8, 2019 •

edited

It will fix client-site template injection issue of the app

https://vue-client-side-template-injection-example.azu.now.sh/?name=%7B%7Bthis.constructor.constructor(%27alert(%22foo%22)%27)()%7D%7D

Changes

Separate template and data model
Write data-initial-state={{State}} from server
Use dataset.initialState in client

azu added 2 commits

August 8, 2019 15:39


          fix(server): separate initial state for vue

21b059a


          fix: use data attributes

37207a7

Owner Author

azu commented Aug 9, 2019

https://twitter.com/k2wanko/status/1159758472398794752

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment