Launchpad.net

Launchpad CVE tracker

CVE 2019-25155

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.

See the

CVE page on Mitre.org for more details.

References

MISC: https://github.com/cur...
MISC: https://github.com/cur...