CVE:CVE-2008-6681
CNNVD:CNNVD-200904-188
Dojo 1.1之前版本中的dijit.Editor存在跨站脚本攻击漏洞。远程攻击者可以借助TEXTAREA元素中的XML实体，注入任意的web脚本或HTML。
solution:Upgrade dojotoolkit dojo to a higher version than 1.0,0.1.0,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.4.0,0.4.1,0.4.2,0.4.3,0.9.0,and avoid the version (,1.0],0.1.0,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.4.0,0.4.1,0.4.2,0.4.3,0.9.0