Unsanitized input from data from a remote resource flows into innerHTML, where it is used to dynamically construct the HTML page on client side. This may result in a DOM Based Cross-Site Scripting attack
(reported in this repo as it is unreleased code following the advice of JSST)
Labels |
Added:
?
|
Status | New | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-06-09 13:00:05 |
Closed_By | ⇒ | brianteeman |
Closed see #34472