This repository has been archived by the owner on Mar 13, 2019. It is now read-only.

IFrames not disabled #9

Open

NoRelect opened this issue Aug 26, 2016 · 0 comments

Assignees

Labels

Security: Cross Site Scripting

Contributor

NoRelect commented Aug 26, 2016

Given the following content to parse:

<!DOCTYPE html>
<html>
    <head></head>
    <body>
        <iframe src="[LOAD EXTERNAL DOCUMENT THAT LOADS SCRIPT HERE]" style="display:none;"></iframe>
    </body>
</html>

Will allow external scripts to be executed.

NoRelect added the Security: Cross Site Scripting label

NoRelect assigned julianschmuckli

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.