mirror of
https://github.com/withastro/astro.git
synced 2025-02-17 22:44:24 -05:00
ca335e1dc0
* Fix an XSS in Server Islands. Discussed with @FredKSchott that this is OK to disclose since Server Islands are still experimental. It's generally not safe to use `JSON.stringify` to interpolate potentially attacker controlled data into `<script>` tags as JSON doesn't escape `<>"'` and so one can use it to break out of the script tag and e.g. make a new one with controlled content. See https://pragmaticwebsecurity.com/articles/spasecurity/json-stringify-xss * Format * Create smart-snakes-promise.md * Switch to manual encoding --------- Co-authored-by: Matt Kane <m@mk.gg> |
||
|---|---|---|
| .. | ||
| blue-jars-hang.md | ||
| config.json | ||
| empty-onions-buy.md | ||
| README.md | ||
| smart-snakes-promise.md | ||
| spotty-camels-joke.md | ||
Changesets
Hello and welcome! This folder has been automatically generated by @changesets/cli, a build tool that works
with multi-package repos, or single-package repos to help you version and publish your code. You can
find the full documentation for it in our repository
We have a quick list of common questions to get you started engaging with this project in our documentation