Vlad Zhavoronkov

Results 5 issues of Vlad Zhavoronkov

### Package version 4.40.0 Node version 20.10.0 Platform No response ### Problem In iframe srcdoc element user can inject any script that could produce XSS attack ### Solution Sanitize srcdoc...

### Problem rollup-plugin-postcss by default inject styles to head at runtime, this behaviour requires services to set style-src: unsafe-inline. ### Solution May be there is some options with extract: true...

### How to reproduce 1. Open editor in markdown format 2. Add this to your markup `[ ] page={number}` ( checkbox with content that has brackets ) 3. Try to...

bug

## Description Add sandbox attribute to allowed attributes of sanitized, cause it can only make security stronger

## RangeError: Start offset is negative when processing large data in WebAssembly ### Description When working with large data in the browser, the following errors occurs: ``` RangeError: Start offset...