Achmad Fahrurrozi Maskur issues

Repositories
Issues
Comments

Results 1 issues of


                                            Achmad Fahrurrozi Maskur

Using HTML tags are allowed by default, can cause Cross-Site Scripting (XSS)

Looking at this [code](https://github.com/keen-on-design/vue-flash-message/blob/b8cb33093b2a9226e69633ad8fae6cb687aeef28/src/FlashMessageComponent.js#L14), it use `innerHTML` and that means we can use HTML tag that can cause XSS Attack Payload ```javascript this.flash(''); ``` Be careful for flash message that...