chriswalg

I have the same issue.

@ahmic I have the same issue. Can you post your solution?

https://yarnpkg.com/en/package/@sum.cumo/vue-datepicker Have a look at changelog in this fork.

you can use https://www.npmjs.com/package/dompurify to prevent xss

issue is not closed for me. I can reproduce xss.

I tested on 2.0.8 and 2.0.10

you are right, it cannot be reproduced in the large chat window in which all messages are displayed. i can only reproduce it in the small chat window.


on https://vue-advanced-chat-app.netlify.app/chat is xss also reproducable.