Stored XSS triggered by json key during UI generation
该报告还没有中文解读。
原文摘录
摘自原文（392 字符中的一小部分）
Stored XSS is triggred from **Indices** -> **Generate a UI Demo**. Typing anything in the **Primary, Secondary, Tertiary, Image or URL attributes** for **User Interface** section. These text box have a drop down which displays the json keys during which XSS is triggered.
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Algolia 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @ctee · 版权归作者与 Algolia 所有