phoenixframework/phoenix_html · Security
XSS in HEEx class attributes
- GHSA ID
- GHSA-j3gg-r6gp-95q2
- Severity
- medium
- Published
- Updated
Description
The class attribute was not protected against XSS attacks when using HEEx.
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')