LavaMoat / snow

Use Snow to finally secure your web app's same origin realms!
https://lavamoat.github.io/snow/demo/
MIT License
100 stars 9 forks source link

Fix demo app after v2 breakage #131

Closed weizman closed 1 year ago

weizman commented 1 year ago

CTX https://github.com/LavaMoat/snow/issues/129#issuecomment-1640046142

Fix: xss challenge page counts on the ability to run javascript: code, but the new demo app does not allow unsafe-inline so i had to come up with different tricks for the demo app to work.