ouqiang / gocron

定时任务管理系统
MIT License
5.79k stars 1.23k forks source link

There is an xss vulnerability in the front end #362

Open retnullyu opened 2 years ago

retnullyu commented 2 years ago

Introduction

gocron/web/vue/src/pages/taskLog/list.vue line 91 host will be parsed by the browser as html, which leads to xss vulnerability

Proof

image

image