x3dom/x3dom — Issue #56: Limit <param> parser to well known params
Author: aha
Created: 2011-11-22 15:23:09+00:00
State: open

At the moment it is possible to add arbitrary params:

In order to increase security, limit this to know params and skip parsing of values that are unknown.

https://github.com/x3dom/x3dom/blob/master/src/Main.js#L114