toonvd / magento-localstorage-recentlyviewed Goto Github PK

As show in the screenshot. Moving dom generation to javascript to fix the security issue of #12
this ticket is just for my reference

If you run the javascript below in firefox (chrome has xss filtering) content is not escaped before output. I will create a pull request to fix this.
localStorage.setItem('Toonvd_Recentlyviewed', '{"website1":{"1460440877109":{"549":"<svg onload=alert(window) src=x />"}}}')

Working on a rewrite of the JS involved. Almost done. Noticed that once you visit one product page, then another and then you move back to the first product page the item doesn't move up the list. Thinking about how to fix this in my new JS for which I will send a pull request tomorrow.