Cross-Origin Interaction

Storybook is vulnerable to cross-origin interaction. The vulnerability is due to inadequate validation of iframe embedding and message origins, which allows an attacker to manipulate a running Storybook preview through a malicious website, modify story files, and potentially execute arbitrary cod...