Skip to content

Bug at display with js injection + crash in .NET #154

Description

@Tyrben

First bug :
The MarkdownPanel displays a black warning : Cette page indique xxxxxxx

Second bug :
The .NET engine crashes.

Third bug :
Notepad++ crashes.

Reproduce :

  • create a .md file with this content
    --><script>alert('attack_par_map_conf')</script>
    MarkdownPanel displays the black message.
  • swap in and out this document
    .NET should display a crash popup message.
  • swap more
    Notepad should crash.

EDIT :
Before swapping of document to trigger the crash. Open a second one. It seems to crash better.

Image Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions