Skip to content

HTML 块可导致XSS #4274

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
fupinglee opened this issue Mar 16, 2022 · 2 comments
Closed

HTML 块可导致XSS #4274

fupinglee opened this issue Mar 16, 2022 · 2 comments

Comments

@fupinglee
Copy link

XSS

复制代码到笔记本中

<img src=1 onerror=alert(1)>

001

关闭打开笔记本即可触发
002

版本环境 Version environment

  • Version: 1.9.0
  • Operating system: MacOs
@88250
Copy link
Member

88250 commented Mar 16, 2022

是的，这个目前不过滤阻止了，已在帮助文档 - 排版元素章节中进行了注意说明。

@88250 88250 closed this as completed Mar 16, 2022
@88250 88250 mentioned this issue Apr 4, 2023
Closed
3 tasks
@88250
Copy link
Member

88250 commented Apr 27, 2024

后续 #11172

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@88250 @fupinglee