Skip to content

Instantly share code, notes, and snippets.

@drogus
Last active September 29, 2017 08:27
Show Gist options
  • Save drogus/92097dfa357fb63ca26ab19b5b242c9b to your computer and use it in GitHub Desktop.
Save drogus/92097dfa357fb63ca26ab19b5b242c9b to your computer and use it in GitHub Desktop.
xss-test
import Ember from 'ember';
export default Ember.Component.extend({
name: Ember.computed(function() {
return `<h1 style="color: red">pwnd</h1>`;
}),
xss: Ember.computed(function() {
return Ember.String.htmlSafe("<b>" + Ember.Handlebars.Utils.escapeExpression(this.get('name')) + "</b>");
})
});
import Ember from 'ember';
export default Ember.Controller.extend({
appName: 'Ember Twiddle'
});
<h1>Welcome to {{appName}}</h1>
<br>
<br>
{{xss-test}}
<br>
<br>
{
"version": "0.12.1",
"EmberENV": {
"FEATURES": {}
},
"options": {
"use_pods": false,
"enable-testing": false
},
"dependencies": {
"jquery": "https://cdnjs.cloudflare.com/ajax/libs/jquery/1.11.3/jquery.js",
"ember": "2.12.0",
"ember-template-compiler": "2.12.0",
"ember-testing": "2.12.0"
},
"addons": {
"ember-data": "2.12.1"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment