feathub里第一个feature "react hook"的评论中出现了xss注入 #2760

New issue

Jump to bottomCopy link

New issue

Jump to bottomCopy link

Closed

Closed

feathub里第一个feature "react hook"的评论中出现了xss注入#2760

Copy link

Description

lbb00

opened on Apr 14, 2019

feat地址： https://feathub.com/NervJS/taro/+14

页面被跳转到了https://blogs.kainy.cn/?from=feathubXSS&location.href=https%3A%2F%2Ffeathub.com%2FNervJS%2Ftaro%2F%2B14

经检查第三条评论中有xss注入

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions