search

marcelodolza / iziToast

Elegant, responsive, flexible and lightweight notification plugin with no dependencies.
https://marcelodolza.github.io/iziToast/
Apache License 2.0
2.62k stars 306 forks source link

XSS vulnerability #206

Open nathansolidatus opened 3 years ago

nathansolidatus commented 3 years ago

Example: set message as : "><img src=x onerror=alert(1)>

Suggestion: The message should be escaped by default.