issues
search
hackmdio
/
codimd
CodiMD - Realtime collaborative markdown notes on all platforms.
https://hackmd.io/c/codimd-documentation
GNU Affero General Public License v3.0
9.24k
stars
1.05k
forks
source link
codimd 2.4.2 xss
#1796
Open
tdbrlly
opened
1 year ago
tdbrlly
commented
1 year ago
poc :
---------------------------------- image:  </div> </div> <div class="comment"> <div class="user"> <a rel="noreferrer nofollow" target="_blank" href="https://github.com/jackycute"><img src="https://avatars.githubusercontent.com/u/2639151?v=4" />jackycute</a> commented <strong> 1 year ago</strong> </div> <div class="markdown-body"> <p>This seems related to #1263 But iframe won't able to steal cookies from parent window, so this has lower priority.</p> </div> </div> <div class="page-bar-simple"> </div> <div class="footer"> <ul class="body"> <li>© <script> document.write(new Date().getFullYear()) </script> Githubissues.</li> <li>Githubissues is a development platform for aggregating issues.</li> </ul> </div> <script src="https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.min.js"></script> <script src="/githubissues/assets/js.js"></script> <script src="/githubissues/assets/markdown.js"></script> <script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.4.0/build/highlight.min.js"></script> <script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.4.0/build/languages/go.min.js"></script> <script> hljs.highlightAll(); </script> </body> </html>
poc :