Cross-Site Scripting (XSS)

@risingstack/protect is vulnerable to cross-site scripting XSS attacks. The attacks exist because the isXss function in lib/rules/xss.js wrongly validates unsafe strings as safe...