engaging-computing / engaging-computing/MYR
Access to DOM through MYR's IDE presents multiple security vulnerabilities
Open
bug
Editor
Frontend
High Priority
- Dominant language
- JavaScript
- Stars
- 24
- Forks
- 22
- PR merge metrics
- No merged PRs in 30d
Description
Currently, user MYR code can access the JS "document" & "window" object, which presents a whole range of opportunities for malicious code execution (as anything can then be injected into the DOM). Steps must be taken to minimize the potential damage that running a JavaScript code sandbox entails.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.