TransOver DOM-XSS Vulnerability

Hello Everyone,

Recently, We've discovered Dom-Based XSS Vulnerability in TransOver Chrome Extension and we reported it. It’s a startling coincidence.

This report was quickly acknowledged by Artem Avetisyan.

What have we done to find this vulnerability?

Below is a screenshot of the chrome extensions page. A click on the link background page opens the background page for this extension

You must active the debug mode and follow flow of source code. Escape_html() function is cause of bug and how the error was corrected that We have reach what we need from this link

https://github.com/artemave/translate_onhover/commit/bc683d6aaa5a8e8d9e49d4ab69f93af19562c699#diff-d31e4b20da6f646d8da1878b042757f2

EOF