Cross-Site Scripting (XSS)

@theia/preview is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a victim's browser via the markdown preview...