1
0
Fork 0
miniflux/http
Frédéric Guillot eb9508502c Avoid XSS when opening a broken image due to unescaped ServerError in proxy handler
Creating an RSS feed item with the inline description containing an `<img>` tag
with a `srcset` attribute pointing to an invalid URL like
`http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error
condition where the invalid URL is returned unescaped and in full.

This results in JavaScript execution on the Miniflux instance as soon as the
user is convinced to open the broken image.
2023-03-12 22:36:03 -07:00
..
client Fix some linter issues 2022-08-08 22:06:38 -07:00
cookie Fix some linter issues 2022-08-08 22:06:38 -07:00
request Use r.RemoteAddr to check /metrics endpoint network access 2023-03-11 20:53:12 -08:00
response Avoid XSS when opening a broken image due to unescaped ServerError in proxy handler 2023-03-12 22:36:03 -07:00
route Fix some linter issues 2022-08-08 22:06:38 -07:00