JS injection through img elements

When the web verification app displays the e-mail content, JavaScript can be injected through event props on img elements

<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" onload="alert('test')" />

assigned to @zdravko.iliev

Closing. Problem was in seal: https://code.vereign.com/seal/building-blocks/seal

closed

mentioned in merge request seal/building-blocks/seal!10