CYBERSECURITY
FEATURED ANALYSIS
Fixing `marked` XSS vulnerability
SOURCE
Blog RSS Feed | Snyk
DATE
READ
1 min read
A recently published vulnerability in the npm marked package shows how attackers can use the flexibility of the Markdown format to introduce Cross-Site Scripting vulnerabilities. This post explains the issue and the fix, …
A recently published vulnerability in the npm marked package shows how attackers can use the flexibility of the Markdown format to introduce Cross-Site Scripting vulnerabilities. This post explains the issue and the fix, and discusses the difficulty of sanitizing complex user input.