Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Tested version: (latest, docker)
Steps to reproduce the vulnerability:
"<script>alert(document.domain)</script>
The text was updated successfully, but these errors were encountered:
@edoardottt Thank you. In the Total.js 4 framework, I have fixed the issue totaljs/framework4@e2cea69. There was a missing encoding configuration value for the specific declaration.
You can test it with the Flow: $ npm install total4@beta.
$ npm install total4@beta
Sorry, something went wrong.
Amazing! You should roll out a patched image too :)
have a nice day!
No branches or pull requests
Tested version: (latest, docker)
Steps to reproduce the vulnerability:
"<script>alert(document.domain)</script>as platform name and save.The text was updated successfully, but these errors were encountered: