Re: [encoding] iso-2022-jp encoder XSS risks (#15)

• From: Anne van Kesteren <notifications@github.com>
• Date: Mon, 25 Jan 2016 13:50:29 -0800
• To: whatwg/encoding <encoding@noreply.github.com>
• Message-ID: <whatwg/encoding/issues/15/174681238@github.com>

Yeah, but there is no better option here I think. Returning U+E/F/1B as NCR could still cause XSS.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/encoding/issues/15#issuecomment-174681238

Received on Monday, 25 January 2016 21:50:56 UTC