• Home
  • Categories
  • WIKI
  • LANGUAGE: en
    • [Others] UOS-AI存在潜在xss
    Product Feedback 672 views · 3 replies ·
    Tofloor
    poster avatar
    Bail
    deepin
    2025-02-09 18:35
    Author

    image.png

    Reply Favorite View the author
    All Replies
    Bail
    deepin
    2025-02-09 18:36
    #1
    It has been deleted!
    Bail
    deepin
    2025-02-09 18:40
    #2

    js好像不会执行，但img会真的获取

    image.png

    image.png

    Reply View the author
    HualetWang
    deepin
    2025-02-10 09:54
    #3

    感谢报告，尽快修复

    Reply View the author
    芝士堡
    deepin
    2025-02-10 11:12
    #4

    这个不会，只是个纯字符串处理， 没有脚本注入风险。只是script标签会被前端渲染markdown的时候过滤掉

    Reply View the author