mikekelly / hal-browser

An API browser for the hal+json media type
MIT License
835 stars 157 forks source link

Fix cross site scripting (XSS) bug #61

Closed jelmerk closed 9 years ago

jelmerk commented 9 years ago

Example :

https://api.foo.com/explorer/browser.html#%22%3E%3Cscript%3Ealert%28%29%3C/script%3E%3C