issues
search
LavaMoat
/
snow
Use Snow to finally secure your web app's same origin realms!
https://lavamoat.github.io/snow/demo/
MIT License
102
stars
9
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Snow can be bypassed with setting Symbol.toStringTag
#9
benjamingr
closed
2 years ago
0
Snow can be bypassed with overriding the "arguments" object prototype
#8
benjamingr
closed
2 years ago
6
Snow can be bypassed with a data url iframe performing the alert
#7
benjamingr
closed
2 years ago
3
Fix proto pollution holes
#6
weizman
closed
2 years ago
0
move away from weizman to lavamoat
#5
weizman
closed
2 years ago
0
fix urls
#4
weizman
closed
2 years ago
0
[bugfix] - disable window open API until issue #2 is resolved
#3
weizman
closed
2 years ago
0
Open API allows bypassing Snow
#2
weizman
closed
1 year ago
7
[bugfix] - fix for vulnerability that takes advantage of the hook-only-once logic
#1
weizman
closed
2 years ago
1
Previous