New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security issues: old libraries, CSP... #87

Open

juju4 opened this issue Feb 20, 2021 · 0 comments

juju4 commented Feb 20, 2021

Uncertain if still maintained but there are multiple issues identified from
https://crxcavator.io/report/ljdgplocfnmnofbhpkjclbefmjoikgke/3.0.6

many vulnerabilities associated to retirejs: bootstrap, jquery, moment, background
permissive content-security policy. something like https://github.com/ninoseki/mitaka/pull/477/files would help
less rated but possible entry points, external javascript on https://oss.maxcdn.com

Would be great to fix.
Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment