Skip to content
OpenAdvisories

Package · crates.io

deno_doc

1 known vulnerabilities.

1 result · Feed

  • Medium 5.4

    Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator

    Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the `deno_doc` crate which lead to Self-XSS with deno doc --html. 1.) XSS in generated `search_index.js`, `deno_doc` outputs a JavaScript …