There is XSS vulnerability when loading content which was fixed for Quill 2.x in https://github.com/quilljs/quill/pull/2226. Would it be possible to include the patch in 1.x to prevent being vulnerable for users on the stable release?
dundalek
All 2 comments
The issue you linked specifically was also introduced in 2.x
jhchen
on 12 Sep 2019
I believe a similar issue is present in 1.x. Here is a codepen demonstrating XSS with Quill 1.3.7.
dundalek
on 12 Sep 2019
👍3
Was this page helpful?
0 / 5 - 0 ratings
Related issues
kheraud
路
3Comments
lastmjs
路
3Comments
DaniilVeriga
路
3Comments
markstewie
路
3Comments
Softvision-MariusComan
路
3Comments
Most helpful comment
I believe a similar issue is present in 1.x. Here is a codepen demonstrating XSS with Quill 1.3.7.