3 matches found
Medium: python3.13
Issue Overview: http.cookies.Morsel.jsoutput returns an inline snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie valu...
EUVD-2021-14522
Malware in sbrugna...
CVE-2022-1293
The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions...