SockJS Cross-Site Scripting Vulnerability

SockJS is a browser JavaScript library that provides WebSocket-like objects. A reflective cross-site scripting vulnerability exists in htmlfile in lib/transport/htmlfile.js in versions of SockJS prior to 3.0. An attacker can exploit this vulnerability with the /htmlfile c parameter to conduct a...