-
There are a handful of package dependencies that appear to be unused by the code in this repository. Some of these just need to be moved to `devDependencies` while others are not direct requirements a…
-
复现方式：发送以下内容
```
console.log("XSS");
```
Devtools 显示消息内容被直接删除。
-
when We enter some strings,such as:
`'">`
or you can use
`[asdasd](javascript:alert(1)) `
![image](https://user-images.githubusercontent.com/6913510/48118530-8135c280-e2a7-11e8-8…
-
This was a library that was brought in for displaying ANSI color codes in the build detail command output. It is currently unused, but was loaded async previously. It seems we could use this for notif…
-
There is no option to escape CSS or HTML tags.
Eg entering` * { float: left }` will render the whole content useless and there is no option to disable it.
Can be tested on https://simplemde.co…
-
This is how i use in program.cs
```
builder.Services.AddWebOptimizer(pipeline =>
{
pipeline.AddCssBundle("~/Content/styles/css",
"Content/styles/vendor…
-
Need to add the apiRequest for addChat on the client side to start a chat with a user if it hasn't been done previously. Then, either initiate a chat or check if a chat already exists, and decide whet…
-
Hello and thank you for this library that I use to clean up html code copied from google docs
I would like to remove the span tags from the copied text but keep the text inside the tags as well as …
-
### Version
4.32.0
### Question
We are using [DependencyCheck](https://github.com/jeremylong/DependencyCheck) to detect the use of external libraries with vulnerabilities and a few weeks ago 2 file…
-
`https://github.com/vuejs/vue/issues/6333`
