diplodoc-platform / diplodoc-platform/transform
Sanitize srcdoc attribute
Open
- Dominant language
- TypeScript
- Stars
- 69
- Forks
- 59
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 6
Description
### Package version
4.40.0
Node version
20.10.0
Platform
No response
### Problem
In iframe srcdoc element user can inject any script that could produce XSS attack
### Solution
Sanitize srcdoc attribute, remove any scripts from there
Contributor guide
Assessment
This issue has not been assessed yet.