Is V2EX Polish safe?
Medium risk
UI enhancement extension for V2EX forum that implements postMessage handlers without origin validation and uses Function() constructor for dynamic code execution in sandboxed context.
0Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.