MessageService XSS vulnerability
Posted: 25 Oct 2019, 10:47
I'm viewing messages from the server with MessageService. If this message contains html tags, MessageService displays it as html. This causes the XSS vulnerability. Therefore, messages displayed with MessageService must be plain text.