3 ms·

this is a rather misleading title when it's talking about something so general (unsanitized user input) about which the author states: > this vulnerability is

by tribby 9y ago

this is a rather misleading title when it's talking about something so general (unsanitized user input) about which the author states: > this vulnerability is not specific to ... Vue.js I don't think anyone will read the title and think this isn't referring to a vue-specific problem

ghusbands 9y ago
Vue is where it was discovered, and it affects only a few other templating engines. Specifically, it affects those that will search for template invocations in arbitrary parts of the page and affects any server-side app that insert user-supplied input into templates without escaping such template invocations.
- deleted 9y ago
  [deleted]