A bug in the Sundown and Redcarpet markdown parsers may lead to XSS
danlec.com/blog/bug-in-sundown-and-redcarpet
In February 2015, I found a flaw in the popular Sundown and Redcarpet markdown parsers. The flaw which was the root cause of an XSS attack I demonstrated against HackerOne.
Comments (0)
Sign in to post comments.