976945 - Everygain Translator - Unsanitized raw remote data assigned to innerHTML

Status: RESOLVED FIXED

(addons.mozilla.org :: Security, defect)

Description

[Diego Casorran [:diegocr]]

Check the pointed URL. There and around that file you can find several jQuery.ajax() calls whose response is used - apparently without any sanitation - to construct DOM trees which are being injected into the websites by using jQuery's .html() method.

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Yes, it looks like that review needs to be reverted. Over to Kris for verification and action.

Comment 2

[Kris Maglione [:kmag]]

This has been an issue in every approved version to-date. If we're going to disable any of them, we're going to need to disable all of them.

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

In that case I think it's best to tell them about it and give them a hard deadline before disabling.

Comment 4

[Kris Maglione [:kmag]]

Developer has been notified that he has a week to comply.

Comment 5

[Kris Maglione [:kmag]]

All public versions have now been disabled.