Security vulnerabilities in demo folder

alexcrack / angular-ui-notification

Angular.js service providing simple notifications using Bootstrap 3 styles with css transitions for animating

MIT License

536 stars 169 forks source link

Security vulnerabilities in demo folder #145

Open ionutbadarau opened 5 years ago

ionutbadarau commented 5 years ago

In my project I use this library and after we scanned the project in jenkins we saw that the report showed 4 minor vulnerabilities in the node_modules/angular-ui-notification/demo folder:

DOS in $sanitize
The attribute usemap can be used as a security exploit
Universal CSP bypass via add-on in Firefox
XSS in $sanitize in Safari/Firefox

Is there a fix for this?