You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, JSExpr uses JSON to serialize strings. This is problematic since JSON doesn't include \s, \S, \/ and \! as valid escape sequences. Therefore JSExpr should probably not depend upon JSON but instead implement its own String serialization where <script> is escaped as <\script>, among others.
Currently, JSExpr uses JSON to serialize strings. This is problematic since JSON doesn't include
\s
,\S
,\/
and\!
as valid escape sequences. Therefore JSExpr should probably not depend upon JSON but instead implement its own String serialization where<script>
is escaped as<\script>
, among others.See https://html.spec.whatwg.org/multipage/scripting.html#restrictions-for-contents-of-script-elements for more detail.
The text was updated successfully, but these errors were encountered: