3 ms·
Neat! just tried it with this json and it didn't do a great job: { "name": "vuejs-guide-test-1", "version": "0.0.1", "description": "My app",
by dflock 10y ago
Neat! just tried it with this json and it didn't do a great job:
{
"name": "vuejs-guide-test-1",
"version": "0.0.1",
"description": "My app",
"author": "Duncan Lock <dlock@phemi.com>",
"private": true,
"dependencies": {
"vue": "^2.0.5"
},
"devDependencies": {
"babel-core": "^6.1.2",
"babel-loader": "^6.1.0",
"babel-plugin-transform-runtime": "^6.1.2",
"babel-preset-es2015": "^6.1.2",
"babel-preset-stage-0": "^6.1.2",
"babel-runtime": "^6.0.0",
"webpack": "^1.12.2",
"webpack-dev-server": "^1.16.2"
}
}
this was the result:
{
"name": "vuejs-guide-test-1",
"version": "0.0.1",
"description": "My app",
"author": "Duncan Lock ",
"private": true,
"dependencies": { "vue": "^2.0.5" },
"devDependencies":
{
"babel-core": "^6.1.2",
"babel-loader": "^6.1.0",
"babel-plugin-transform-runtime": "^6.1.2",
"babel-preset-es2015": "^6.1.2",
"babel-preset-stage-0": "^6.1.2",
"babel-runtime": "^6.0.0",
"webpack": "^1.12.2",
"webpack-dev-server": "^1.16.2"
}
}
- dotancohen 10y agoThat's the same XSS vulnerability that I came to report. Here is a simplified test case: {"name":"<b>HELLO</b>"}