Skip to content

removed CKEditor samples - due to XSS possibility on samples/index.html#70

Open
nvwieren wants to merge 1 commit intomendixlabs:masterfrom
nvwieren:master
Open

removed CKEditor samples - due to XSS possibility on samples/index.html#70
nvwieren wants to merge 1 commit intomendixlabs:masterfrom
nvwieren:master

Conversation

@nvwieren
Copy link
Contributor

Issue was discovered during a hacking marathon - as follows:

  • Use the Source button
  • add

    bla

    <script>alert()</script>
  • use the preview button

Script is executed..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant