4 ms·

Ever heard of XSS?

• scandox 10y ago
  Yes but what I think I had not given enough thought to were DOM-based vulnerabilities, which it seems to me are the ones that would be relevant to 3rd party JS libs. Anyway I will certainly be giving this deeper thought.
  • steveax 10y ago
    If you're for instance relying on handlebars to escape displayed content from user input properly and your version has a vulnerability...