krisk / Fuse

Lightweight fuzzy-search, in JavaScript
https://fusejs.io/
Apache License 2.0
18.36k stars 772 forks source link

XSS in fusejs.io #297

Closed abaykan closed 5 years ago

abaykan commented 5 years ago

fusejs-xss

krisk commented 5 years ago

Fair catch, though it wouldn't really compromise the system, since it's a purely client-side static website 😄