Fixing `marked` XSS vulnerability
A recently published vulnerability in the npm `marked` package shows how attackers can use the flexibility of the Markdown format to introduce Cross-Site Scripting vulnerabilities. This post explains the issue and the fix, and discusses the difficulty of sanitizing complex user input.
原文：https://www.a8q9.cn/en/article/fixing-marked-xss-vulnerability-ef0e6f.html