@chinesedfan How can I have this fix ? I have a #2646 issue

@edgarjrg I don't know. But I will try to ask members who have publish permissions to release soon.

@DanielYeshua Can you elaborate your question?

There is still no solution for those who use AXIOS in this way: <script src = "main.js"> </script>

There may be and I have not yet left.

@DanielYeshua Never mind. When the next version is released, those dist files will be updated correspondingly.

I am wondering if there is anything else that will help covering the issue of XSS in helpers/isURLSameOrigin.js

In my organization, I run a scan on my app with Synopsys Coverity and this is higlighting a Critical XSS issue in helpers/isURLSameOrigin.js
https://github.com/axios/axios/blob/master/lib/helpers/isURLSameOrigin.js#L30

CVSS Severity: Critical
CWE 79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
This CWE entry is at position 7 in the OWASP Top 10.
This CWE entry is at position 4 in the CWE/SANS Top 25.

@emilyemorehouse Let me know if this can be addressed or not.