3 ms·
I wonder how it handles cases like this: <sc<script>ript>alert('XSS')</sc</script>ript> ...and other strings from https://github.com/minimaxir/big-list-of-nau
by ataylor32 5y ago
I wonder how it handles cases like this:
<sc<script>ript>alert('XSS')</sc</script>ript>
...and other strings from https://github.com/minimaxir/big-list-of-naughty-strings https://github.com/minimaxir/big-list-of-naughty-strings
- open-paren 5y ago> (new Sanitizer()).sanitizeToString(`<sc<script>ript>alert('XSS')</sc</script>ript>`) "ript>alert('XSS')ript>"