Skip to content

Issues: LavaMoat/snow

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

17 Open 58 Closed
17 Open 58 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Snow can be bypassed using the Response.prototype.blob function
#159 opened Apr 29, 2024 by matanber
2
Snow can be bypassed by creating a Blob URI inside a worker
#158 opened Apr 29, 2024 by matanber
7
Snow can be bypassed with location.replace
#154 opened Oct 16, 2023 by hackvertor
3
Snow can be bypassed with forms and buttons formAction
#153 opened Oct 16, 2023 by hackvertor
1
Snow can be bypassed with nested cross-origin frames
#152 opened Oct 16, 2023 by deryilz
2
Snow can be bypassed with meta and the HTML sanitizer
#151 opened Oct 16, 2023 by hackvertor
1
Snow can be bypassed with native Prototype Pollution
#149 opened Oct 2, 2023 by terjanq
1
Snow can by bypassed with polluting NodeList.prototype.length
#148 opened Oct 2, 2023 by terjanq
2
Snow can be bypassed with declarative shadow DOM passed as object instead of string
#147 opened Oct 2, 2023 by avlidienbrunn
1
customElements extends check can be bypassed using a non-string
#145 opened Oct 1, 2023 by avlidienbrunn
3
Snow can be bypassed with opener.alert()
#144 opened Sep 30, 2023 by terjanq
1
Blob validation in Snow can be bypassed with native object copy
#143 opened Sep 30, 2023 by terjanq
2
Snow can by bypassed with race condition
#142 opened Sep 30, 2023 by terjanq
1
Snow can be bypassed with inline script
#141 opened Sep 30, 2023 by terjanq
4
Snow can be bypassed with iframes and srcdoc
#138 opened Sep 29, 2023 by hackvertor
1
Bypass via nested same-origin iframe
#136 opened Aug 9, 2023 by NDevTK
4
Support "unsafes" - unsafely configure Snow to allow non-secure operations enhancement New feature or request
#110 opened Jun 22, 2023 by weizman
3
ProTip! Exclude everything labeled bug with -label:bug.