Code, Data, Media
In the end, I had to add "tainting" for all DOMParser elements. Any tainted element couldn't be inserted into the DOM. All of those escapes were quite bad, but not catastrophic, given that JS would only run when clicked on the malicious user tile.
。关于这个话题，爱思助手下载最新版本提供了深入分析
Карина Черных (Редактор отдела «Ценности»)
На Украине заявили о «топливной лихорадке»08:39
Trilium Simple SingleFile Renderer - A plugin to add a new Template note to