The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings. |
||
|---|---|---|
| .. | ||
| javascripts | ||
| stylesheets | ||
| run-qunit.js | ||
| smoke_test.js | ||
The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings. |
||
|---|---|---|
| .. | ||
| javascripts | ||
| stylesheets | ||
| run-qunit.js | ||
| smoke_test.js | ||