Joplin 跨站脚本漏洞

Joplin is an open source notes and to-do list application by Laurent Cozic, an individual developer. Joplin suffers from a cross-site scripting vulnerability that stems from not escaping HTML entities when adding a note title and the lack of a strict Content-Security-Policy, resulting in the...