zzndb

即使配置了 "protect_from_xss":true 也能够 XSS 注入

2

**Describe the bug** 基于当前实现使用 markdown-it-xss（好像源仓库已不存在）依然存在被注入的情况 **To Reproduce** Steps to reproduce the behavior: 参见 https://github.com/victorootnice/victorootnice.github.io/blob/main/2023/bbp-01.md 自行从当前 release 下载亦可复现 **Additional context** 感觉可以直接参考原 [markdown-it-xss](https://web.archive.org/web/20201031145151/https://github.com/yzyeengang/markdown-it-xss) 实现，使用 https://github.com/leizongmin/js-xss 来做 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5701

海岛奇兵 Google play 版 规则纠错

1

- 应用包名：com.supercell.boombeach - 应用标题：Boom Beach - 应用版本：Version 37.125 - 规则问题描述：应用会在系统用户目录`/storage/emulated/xx`创建`.backups`文件夹 - 规则修改建议：直接开启重定向即可 - 规则代码修改建议：

Add cpio as explicit spec file Requires

1

When using `osc service disabledrun` in official tumbleweed docker image (with obs-service-{obs-scm,tar} installed), I encountered cpio missing error. And I can find cpio as an explicit Depends in debian/control file,...