Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feathub里第一个feature "react hook"的评论中出现了xss注入 #2760

Closed
lbb00 opened this issue Apr 14, 2019 · 3 comments
Closed

feathub里第一个feature "react hook"的评论中出现了xss注入 #2760

lbb00 opened this issue Apr 14, 2019 · 3 comments

Comments

@lbb00
Copy link

lbb00 commented Apr 14, 2019

feat地址: https://feathub.com/NervJS/taro/+14

页面被跳转到了https://blogs.kainy.cn/?from=feathubXSS&location.href=https%3A%2F%2Ffeathub.com%2FNervJS%2Ftaro%2F%2B14

经检查第三条评论中有xss注入

@taro-bot
Copy link

taro-bot bot commented Apr 14, 2019

欢迎提交 Issue~

如果你提交的是 bug 报告,请务必遵循 Issue 模板的规范,尽量用简洁的语言描述你的问题,最好能提供一个稳定简单的复现。🙏🙏🙏

如果你的信息提供过于模糊或不足,或者已经其他 issue 已经存在相关内容,你的 issue 有可能会被关闭。

Good luck and happy coding~

@Pines-Cheng
Copy link
Contributor

确实是,感谢~

@yuche
Copy link
Contributor

yuche commented Apr 14, 2019

这个是 feathub 的问题,我们也没有删除评论的权限,他们应该不维护了,996.icu 的列表也存在这个问题

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants