Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

XSS for text input, text node, and incorrect Number input parsing #67

Open
lifeart opened this issue Aug 14, 2017 · 0 comments
Open

XSS for text input, text node, and incorrect Number input parsing #67

lifeart opened this issue Aug 14, 2017 · 0 comments
Assignees
Labels
Projects

Comments

@lifeart
Copy link
Contributor

lifeart commented Aug 14, 2017

for text input -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives an XSS issue,
for text node in template -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives an XSS issue,
for number input -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives eee12e result

@whoozle whoozle self-assigned this Aug 14, 2017
@whoozle whoozle added the bug label Sep 6, 2017
@whoozle whoozle added this to What's on now? in QmlCore Apr 19, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
QmlCore
  
What's on now?
Development

No branches or pull requests

2 participants