search

darcyclarke / Repo.js

:page_facing_up: A plugin to embed Github repos on your site
MIT License
911 stars 82 forks source link

XSS vulnerability via filenames in repository #40

Open ecneladis opened 7 years ago

ecneladis commented 7 years ago

XSS is possible via unescaped filename in git repository, e.g. <img src=x onerror=alert(1)>.

image

Repository with POC: https://github.com/ecneladis/xss_github_vector