Security Advisories (2)
CVE-2020-8127
(2020-02-28)
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
CVE-2022-0776
(2022-03-01)
Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.
- https://github.com/hakimel/reveal.js/commit/32cdd3b1872ba8e2267c9e87ae216cb55f40f4d2
- https://huntr.dev/bounties/be2b7ee4-f487-42e1-874a-6bcc410e4001
- https://github.com/yusukebe/App-revealup/issues/12#issuecomment-1169417411
- https://github.com/yusukebe/App-revealup/commit/c8fea67994b1aa6d734066bff9ada4e834b09cb7
NAME
revealup - Web app for showing Markdown as slides
SYNOPSIS
revealup serve -p 5000
Options:
-p HTTP Port Number
--theme CSS filename or pathModule Install Instructions
To install App::revealup, copy and paste the appropriate command in to your terminal.
cpanm App::revealupperl -MCPAN -e shell
install App::revealupFor more information on module installation, please visit the detailed CPAN module installation guide.