instance-oom/ngx-markdown-editor

XSS vulnerability

cosad3s opened this issue · 3 comments

cosad3s commented

Hello,

I have identified an XSS vulnerability on the last version of ngx-markdown-editor (3.3.2 - Last commit 783fe2d).

Payload :
image

Previewed as:
image

The XSS:
image

instance-oom commented

You can set this markedjsOpt.sanitize to true. That's can prevent this.

cosad3s commented

The option is already set to true.
It blocks other payloads, but not this one.
I used the preconfigured "demo" subfolder from this repository.

instance-oom commented

Please using 3.3.3. This version has been fixed this issue.