Sanitize JSONP namespace (XSS) #40

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

hugorodrigues wants to merge 3 commits into Marak:master from hugorodrigues:master

hugorodrigues commented May 5, 2012

Jsonp is being processed without sanitize the callback value from the user.

To prevent XSS this fix will not run JSONPWRAP if the callback value have any special char's

hugorodrigues added 3 commits

May 5, 2012 01:28


          Fix Standalone example relative path

5c8d50b


          Add eyes dependency

5e26e83


          Sanitize JSONP namespace

de78c15

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet