SECURITY UPDATE: Fixed cross-site scripting issue in redirect result page.
SECURITY UPDATE: Fixed cross-site scripting issue in redirect result page.

Although setting HTML element content via innerHTML ignores script
tags, it is possible to run arbitrary script code by using the onerror
handler of img tags:

result.html?<img src="foo.png" onerror="alert(document.cookie)"/>

Setting the body content via textContent/innerText fixes this security
hole.

Thanks to Diederik van der Boor for the report and proof-of-concept.

blueimp/jQuery-File-Upload,blueimp/jQuery-File-Upload,Verde1705/verde1705.github.io,blueimp/jQuery-File-Upload,blueimp/jQuery-File-Upload,GrizliK1988/PhotoWidget,Verde1705/verde1705.github.io,blueimp/jQuery-File-Upload,blueimp/jQuery-File-Upload