Vulnerability Summary
HackerOne disclosed report --> https://hackerone.com/reports/3601655 by smlee
Rails::HTML::Sanitizer.allowed_uri? returns true for entity-encoded control-character-split javascript: URLs such as:
java script:alert(1)java script:alert(1)jav	ascript:alert(1)When these values are rendered into href attributes, browsers normalize them to javascript: URLs and execute them on click.
hackerone-reportsHackerOne disclosed report --> https://hackerone.com/reports/3168691 by joejoe5
hackerone-reportsHackerOne disclosed report --> https://hackerone.com/reports/3287208 by hellokbit
hackerone-reportsHackerOne disclosed report --> https://hackerone.com/reports/3558277 by uv3doble
No comments yet.
Be the first to share your thoughts
Log in to join the discussion.
Sign In