XSS Attack with Express API
ImpactXSS attack - anyone using the Express API is impactedPatchesThe problem has been resolved. Users should upgrade to version 2.0.0.WorkaroundsDon't pass user supplied data directly to `res.renderFile`.References_Are there any links users can visit to find out more?_
See https://github.com/eta-dev/eta/releases/tag/v2.0.0