CVE-2016-1000228

Affected versions of "gmail-js" are vulnerable to cross-site scripting in the "tools.parseresponse", "helper.get.visibleemailspost", and "helper.get.emaildatapost" functions, which pass user input directly into the Function constructor...