marcelodolza / iziToast

Elegant, responsive, flexible and lightweight notification plugin with no dependencies.

Home Page:http://izitoast.marcelodolza.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

XSS vulnerability

nathansolidatus opened this issue · comments

Example:
set message as : "><img src=x onerror=alert(1)>

Suggestion:
The message should be escaped by default.