Unsanitized input from data from a remote resource flows into innerHTML, where it is used to dynamically construct the HTML page on client side. This may result in a DOM Based Cross-Site Scripting attack
(reported in this repo as it is unreleased code following the advice of JSST)
| Labels |
Added:
?
|
||
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-06-09 12:59:56 |
| Closed_By | ⇒ | brianteeman |
Closed see #34472