URL Spoofing

firefox:edge is vulnerable to URL spoofing. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via document.implementation.createHTMLDocument function. In Firefox and Safari an attacker can use an malicious inert document created using the vulnerable function. Details Cross-site scripting or XSS is a code...