Ask Your Question
3

injection <script>alert("xss");</script>

asked 2012-01-10 14:39:42 -0500

piskvorky gravatar image piskvorky
350 9 4 19

updated 2012-01-10 22:11:35 -0500

Evgeny gravatar image Evgeny flag of Chile
11044 50 84 182
http://askbot.org/

just testing script injection :-)

<script>alert("xss");</script>
delete close flag offensive retag edit

Comments

Viewing this page gives me a browser alert. I guess that's not desirable, so I'm adding a "bug" tag.

piskvorky ( 2012-01-10 15:05:08 -0500 )edit

Highly undesirable, will fix asap.

Evgeny ( 2012-01-10 16:50:18 -0500 )edit

1 Answer

Sort by ยป oldest newest most voted
1

answered 2012-01-10 22:12:07 -0500

Evgeny gravatar image Evgeny flag of Chile
11044 50 84 182
http://askbot.org/

Fixed in 0.7.38. Keep trying :) thanks!

link publish delete flag offensive edit

Comments

@Evgeny: still happens when viewing a profile page: http://askbot.org/en/users/459/piskvorky/

piskvorky ( 2012-01-14 08:02:09 -0500 )edit

Fixed this too, now need to update the repo trunk.

Evgeny ( 2012-01-15 14:46:24 -0500 )edit

Your answer

Please start posting your answer anonymously - your answer will be saved within the current session and published after you log in or create a new account. Please try to give a substantial answer, for discussions, please use comments and please do remember to vote (after you log in)!

[hide preview]

Reliable Askbot Hosting

Create your Q&A site at askbot.com. Managed Askbot hosting at just $15/mo. Dedicated hosting, support contracts, consulting services.

create your Q&A site
30 days free trial

Question tools

Follow

subscribe to rss feed

Stats

Asked: 2012-01-10 14:39:42 -0500

Seen: 163 times

Last updated: Jan 10 '12