GMS-2013-6: Cross-site Scripting

March 14, 2013

XSS vulnerability for html files served up with Content-Disposition attachment headers.

References

github.com/turbolinks/turbolinks-classic/commit/fff70bd9371bf9d700ff40463eb03f1a2b8ec3ab
github.com/turbolinks/turbolinks-classic/issues/195
github.com/turbolinks/turbolinks-classic/pull/441

Code Behaviors & Features

Detect and mitigate GMS-2013-6 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →