Top
image credit: Pexels

Closure JavaScript Library introduced XSS issue in Google Search and potentially other services

April 2, 2019

Category:

A change made months ago in an open-source JavaScript library introduced a cross-site scripting (XSS) vulnerability in Google Search.

The Japanese security researcher Masato Kinugawa discovered an XSS vulnerability in Google Search that was introduced with a change made months ago in an open-source JavaScript library.

The library is named Closure and according to the expert it fails to properly sanitize user input.

Read More on Security Affairs