New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Possibility to inject xss code in editor #58

Open

knsv opened this issue Jul 21, 2019 · 0 comments

Contributor

knsv commented Jul 21, 2019 •

edited

Loading

graph TD
A["<img src=a onerror=alert(1) />"] -->|Get money| B(Go shopping)
B --> C{Let me think}
C -->|One| D[Laptop]
C -->|Two| E[iPhone]
C -->|Three| F[fa:fa-car Car]

Relates to mermaid-js/mermaid#847

The text was updated successfully, but these errors were encountered:

knsv mentioned this issue

Cross-Site Scripting:DOM - Issue mermaid-js/mermaid#847

Closed

knsv added a commit that referenced this issue


          Fix for issue #58 and new version of mermaid

ea832f2

diegorubert mentioned this issue

HTML labels not working #59

Open

# for free to join this conversation on GitHub. Already have an account? # to comment