nedwidek/firefox-gmail-manager-ng — Issue #9: AOM Review: Event Listeners from Unsanitized Strings
Author: nedwidek
Created: 2012-02-08 16:11:35+00:00
State: open

> 3) Generating script fragments such as event listeners from unsanitized string data is error prone and poses a major risk of security vulnerabilities. For more information, please see https://developer.mozilla.org/en/XUL_School/DOM_Building_and_HTML_Insertion#listeners