jalmasi/vrspace

json sanitation bypassed

jalmasi opened this issue · 1 comments

jalmasi commented

{"object":{"Client":0},"changes":{"properties":{"":"string","number":123.456}}}

gets distributed, possible XSS