Confirm
353
edits
Changes
→1. XSS & HTML Injection attacks
====1. XSS & HTML Injection attacks====
* js/languages.js:21: option.innerHTML = lEmbedBegin + languages[lang] + lEmbedEnd;
** languages[] comes from '/shared/resources/languages.json' so they are presumably safe. If an attacker can change/add languages to languages.json then this would be a legit injection.
====2. Secure Communications ====
