Hacker News new | ask | show | jobs
by wrinkl3 3137 days ago
Vulnerabilities don't have to affect the backend - most of JQuery-related CVEs that I could find had to do with XSS.
1 comments
merb 3137 days ago
which can only happen if you pass wrong data from the backend to the jquery related function. I.e. dynamically generate input for $()...
link
PetahNZ 3137 days ago
Well not really backend exclusive: `$('#foo').append('Showing search results for ' + (new URL(location)).searchParams.search);`
link