Find vulnerabilities about mdjs-viewer HOT 3 OPEN

PREVENTED: Trying to fetch an external resource

fetch('https://www.google.com/').then(response => response.text().then(text => console.log(text)));

from mdjs-viewer.

PREVENTED: Trying to fetch from api.github.com (e.g. do github api calls on behalf of the user)

fetch('https://api.github.com/').then(response => response.text().then(text => console.log(text)));

from mdjs-viewer.

PREVENTED: get data from parent window
before you start you should set window.secret = 'pssst';

console.log('window.secret', window.secret);
console.log('parent.secret', parent.secret);

from mdjs-viewer.