-
Currently if you try to serialize a `NodeList` you're just going to end up with a handle to the remote object, rather than a helpful `value` property containing an array of the nodes. We should fix th…
-
PoC:
```js
Object.defineProperty(NodeList.prototype, 'length', {value:0});
document.body.innerHTML = '';
iframe.alert(1337);
```
Vulnerable path:
1. `getFramesArray` called in https://githu…
-
Today I hit a exception while I was trying to compress with Django compressor.
I was not the only one who was seeing this exception. So I quickly found a open PR for that.
It seemed like more peopl…
-
(parse-to-list str) is equivalent to (node->nodelist (parse str)).
if (parse str) fails to read the xml document and returns nil, parse-to-list fails with an unclear error message :
```
* (parse-…
-
-
## Bug Description
**Overview:**
When storing a `NodeList` inside a `Grain`, a [Object NodeList] text is inserted instead of the NodeList. The parser incorrectly inserts all values inside a grain as…
-
```html
你好,{{user}},这是使用angular开发小程序的一个模板项目
```
```css
.img {
width: 375px;
height: 375px;
}
```
无法加载出图片,源码是直接编译成了`img`标签
```html
{{nodeList[0].value}}
```
-
typescript version: 3.9.2
method `item()` of nodelist should return a node or **null** (if index out of range)
(see: https://developer.mozilla.org/en-US/docs/Web/API/NodeList/item)
Typescript b…
-
When i click in a Dynamic Node (is what i call the Nodes that have the capability to open sub-NodeLists) it opens a sub-NodeList, and that sub-NodeList has another Dynamic Node that opens another sub-…
-
The code from [here](https://github.com/canjs/can-stache/blob/master/src/mustache_core.js#L336-L342) should be abstracted into a canReflect API:
```
if(observable instanceof Observation) {
obse…