quill is a modern rich text editor built for compatibility and extensibility.
Affected versions of this package are vulnerable to Reverse Tabnabbing via the snow theme. The link has the target attribute set to
_blank but has no
rel property. This means that documents containing untrusted links make the page they are embedded in susceptible to tabnabbing.
quill to version 1.3.7 or higher.
- Snyk ID
- 06 Jul, 2019
- 08 Jul, 2019