Cross-Site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting XSS. A remote unauthenticated attacker is able to inject and execute arbitrary javascript via adding media queries at "Settings" = "Thumbnails" = "Video Thumbnails" in the pimcore service...

SVG & media queries

One of the great things about SVG is you can use media queries to add responsiveness to images: circle fill: green; @media min-width: 100px circle fill: blue; But when should the circle be blue? The specs say min-width should match on the width of the viewport, but… Which viewport? …as above… Whi...