Vlad Zhavoronkov
Vlad Zhavoronkov
### Package version 4.40.0 Node version 20.10.0 Platform No response ### Problem In iframe srcdoc element user can inject any script that could produce XSS attack ### Solution Sanitize srcdoc...
### Problem rollup-plugin-postcss by default inject styles to head at runtime, this behaviour requires services to set style-src: unsafe-inline. ### Solution May be there is some options with extract: true...
### How to reproduce 1. Open editor in markdown format 2. Add this to your markup `[ ] page={number}` ( checkbox with content that has brackets ) 3. Try to...
## Description Add sandbox attribute to allowed attributes of sanitized, cause it can only make security stronger
## RangeError: Start offset is negative when processing large data in WebAssembly ### Description When working with large data in the browser, the following errors occurs: ``` RangeError: Start offset...