Skip to content

articleプラグインとSWFUの脆弱性対応#26

Merged
4 commits merged into
masterfrom
hotfix
Dec 6, 2016
Merged

articleプラグインとSWFUの脆弱性対応#26
4 commits merged into
masterfrom
hotfix

Conversation

@ghost

@ghost ghost commented Dec 6, 2016

Copy link
Copy Markdown

#概要

  • articleプラグイン利用時に、#html#html2#beforescript#lastscriptを記述して外部のユーザーが任意のJavascriptコードを実行できる脆弱性(XSS脆弱性)に対応
  • SWFUのクロスサイトスクリプティングの脆弱性に対応

resolve #22 #25

@ghost ghost merged commit 651c203 into master Dec 6, 2016
@ghost ghost deleted the hotfix branch December 6, 2016 02:32
This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

#article プラグインで任意のJavaScriptコードが実行される危険性

0 participants