raymak
commented
8 years ago - Usage of innerHTML/jQuery.html() etc (potential remote code execution): data/presentation/doorhanger.js#34, 37, 38, 39, 44, 175, 247 data/presentation/splitpage.js#17 data/debug.js#61, 72, 78, 108
- old jQuery JSONView version, potential remote code injection vulnerability. data/js/jquery.jsonview.js
- jQuery hash does not match original; also old, unsupported version data/js/jquery.min.js
- unnecessary innerHTML: data/presentation/doorhanger.js#169
- remote images data/infopage.css#2