Skip to content

rule: js库 #18

@nicocatxzc

Description

@nicocatxzc

技术名称

javascript

分类

前端库

类型说明

No response

匹配规则

真实样例 / 证据

一些库会将相关报错信息带到前端,比如带有highlight.js/tsparticles的前端资源中会有以下字样
可以考虑扫描相关前端文件通过报错代码来加以佐证

if (N.children.length > 0 && (y.ignoreUnescapedHTML || (console.warn("One of your code blocks includes unescaped HTML. This is a potentially serious security risk."),
            console.warn("https://github.com/highlightjs/highlight.js/wiki/security"),
            console.warn("The element with unescaped HTML:"),
            console.warn(N)),


console.warn("An error occurred in tsParticles pathseg polyfill. If the Polygon Mask is not working, please open an issue here: https://github.com/tsparticles/tsparticles", t)

同时,使用highlight.js的页面可能会有`language-*`类在code标签上,供highlight.js精确高亮

测试页面:`https://nicocat.cc`

建议置信度

官网 / 仓库 URL

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    rule规则新增、规则修正

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions