Skip to content

Comment escape allows code execution #7

@boscap

Description

@boscap

If you're using the /* */ comment style and add an extra * it will escape the comment check and parse the code as normal for example:

/** let x = 1;console.log("x = 1");/* */

image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions