Cross-site Scripting (XSS)

Overview jsondiffpatch is a JSON diff & patch object and array diff, text diff, multiple output formats Affected versions of this package are vulnerable to Cross-site Scripting XSS via the formatters.html.format and formatters.annotated.format functions, which do not HTML-escape the array-move...