XSS in Document Links
Open
- Dominant language
- Vue
- Stars
- 257
- Forks
- 60
- PR merge metrics
- No merged PRs in 30d
Description
A link like javascript:alert(1); triggers an alert.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the document-link handling in the Vue application and trace how javascript: URLs are processed. Reproduce the alert behavior, then add coverage showing that such links no longer execute and verify the existing link behavior remains intact.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100