5 ms·
Yes but what I think I had not given enough thought to were DOM-based vulnerabilities, which it seems to me are the ones that would be relevant to 3rd party JS
by scandox 10y ago
Yes but what I think I had not given enough thought to were DOM-based vulnerabilities, which it seems to me are the ones that would be relevant to 3rd party JS libs. Anyway I will certainly be giving this deeper thought.
- steveax 10y agoIf you're for instance relying on handlebars to escape displayed content from user input properly and your version has a vulnerability...