{"action":"created","issue":{"url":"https://api.github.com/repos/summernote/summernote/issues/2003","repository_url":"https://api.github.com/repos/summernote/summernote","labels_url":"https://api.github.com/repos/summernote/summernote/issues/2003/labels{/name}","comments_url":"https://api.github.com/repos/summernote/summernote/issues/2003/comments","events_url":"https://api.github.com/repos/summernote/summernote/issues/2003/events","html_url":"https://github.com/summernote/summernote/issues/2003","id":167739108,"number":2003,"title":"XSS from sanitized text - &lt;script&gt;alert('XSS');&lt;/script&gt;","user":{"login":"michalskop","id":930251,"avatar_url":"https://avatars2.githubusercontent.com/u/930251?v=4","gravatar_id":"","url":"https://api.github.com/users/michalskop","html_url":"https://github.com/michalskop","followers_url":"https://api.github.com/users/michalskop/followers","following_url":"https://api.github.com/users/michalskop/following{/other_user}","gists_url":"https://api.github.com/users/michalskop/gists{/gist_id}","starred_url":"https://api.github.com/users/michalskop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michalskop/subscriptions","organizations_url":"https://api.github.com/users/michalskop/orgs","repos_url":"https://api.github.com/users/michalskop/repos","events_url":"https://api.github.com/users/michalskop/events{/privacy}","received_events_url":"https://api.github.com/users/michalskop/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-26T23:57:14Z","updated_at":"2017-11-26T12:09:23Z","closed_at":"2017-11-26T12:09:23Z","author_association":"NONE","body":"It's been mentioned here already (with working example), but on an already closed issue:\nhttps://github.com/summernote/summernote/issues/1627#issuecomment-227417111\nSo I believe it is worth opening a new issue:\n\nThis (otherwise sanitized) code:\n\n``` html\n<textarea>\n    &lt;script&gt;alert('XSS');&lt;/script&gt;</p>\n</textarea>\n```\n\ngets executed by summernote.\n"},"comment":{"url":"https://api.github.com/repos/summernote/summernote/issues/comments/347004114","html_url":"https://github.com/summernote/summernote/issues/2003#issuecomment-347004114","issue_url":"https://api.github.com/repos/summernote/summernote/issues/2003","id":347004114,"user":{"login":"DiemenDesign","id":32765473,"avatar_url":"https://avatars1.githubusercontent.com/u/32765473?v=4","gravatar_id":"","url":"https://api.github.com/users/DiemenDesign","html_url":"https://github.com/DiemenDesign","followers_url":"https://api.github.com/users/DiemenDesign/followers","following_url":"https://api.github.com/users/DiemenDesign/following{/other_user}","gists_url":"https://api.github.com/users/DiemenDesign/gists{/gist_id}","starred_url":"https://api.github.com/users/DiemenDesign/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DiemenDesign/subscriptions","organizations_url":"https://api.github.com/users/DiemenDesign/orgs","repos_url":"https://api.github.com/users/DiemenDesign/repos","events_url":"https://api.github.com/users/DiemenDesign/events{/privacy}","received_events_url":"https://api.github.com/users/DiemenDesign/received_events","type":"User","site_admin":false},"created_at":"2017-11-26T12:09:23Z","updated_at":"2017-11-26T12:09:23Z","author_association":"MEMBER","body":"Trying this on the current version of Summernote on summernote.org the code is not being executed. If the code above is pasted in either code view or normal view it no longer gets executed.\r\nIf you find this to still be an issue, please reopen or create a new issue."}}
{"actor":{"display_login":"DiemenDesign"}}