qmlcore
qmlcore copied to clipboard
XSS for text input, text node, and incorrect Number input parsing
for text input -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives an XSS issue,
for text node in template -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives an XSS issue,
for number input -> <a href="clickme" onclick="alert(12);">clickme</a> -> gives eee12e result