1. 18 4月, 2021 1 次提交
  2. 15 4月, 2021 1 次提交
  3. 26 5月, 2020 2 次提交
  4. 25 5月, 2020 1 次提交
    • D
      Added emoji zwj sequences · b2eada7e
      Dmytro Doroshenko 提交于
      The following are the recommended emoji zwj sequences, which use a U+200D ZERO WIDTH JOINER (ZWJ) to join the characters into a single glyph if available. When not available, the ZWJ characters are ignored and a fallback sequence of separate emoji is displayed.
      b2eada7e
  5. 19 5月, 2020 1 次提交
  6. 15 5月, 2020 1 次提交
  7. 14 5月, 2020 2 次提交
  8. 20 4月, 2020 3 次提交
  9. 15 3月, 2020 2 次提交
  10. 03 1月, 2020 1 次提交
  11. 02 12月, 2019 15 次提交
  12. 30 11月, 2019 1 次提交
  13. 29 11月, 2019 1 次提交
  14. 25 10月, 2019 1 次提交
  15. 17 9月, 2019 1 次提交
    • M
      added Deseret string · b105d608
      Mike 提交于
      Deseret characters are located within U+010000..U+10FFFF range and use surrogate pairs even in UTF-16, i. e. use two 'words' (erroneously called 'char's in Java).
      b105d608
  16. 07 7月, 2019 1 次提交
  17. 23 2月, 2019 1 次提交
    • M
      Adds `constructor` · 71a30139
      Mike Samuel 提交于
      `constructor` is the only lowercase identifier that is `in` all JavaScript objects, and can be involved in obscure XSS so can be used to abuse code that uses JavaScript objects as lookup tables.
      
      ```js
      var empty = {};
      if ('constuctor' in empty && empty['constructor']) {
        // runs
      }
      empty['constructor']['constructor']('alert(1)')();  // Parses and runs 
      ```
      71a30139
  18. 01 2月, 2019 1 次提交
  19. 30 1月, 2019 2 次提交
  20. 19 11月, 2018 1 次提交