Ask Your Question
3

injection <script>alert("xss");</script>

asked Jan 10

piskvorky gravatar image piskvorky
330 2 16

updated Jan 10

Evgeny gravatar image Evgeny flag of Chile
6715 31 49 96
http://askbot.org/

just testing script injection :-)

<script>alert("xss");</script>

Comments

Viewing this page gives me a browser alert. I guess that's not desirable, so I'm adding a "bug" tag.

piskvorky (Jan 10)

Highly undesirable, will fix asap.

Evgeny (Jan 10)

1 Answer

Sort by ยป oldest newest most voted
1
piskvorky has selected this answer as correct

answered Jan 10

Evgeny gravatar image Evgeny flag of Chile
6715 31 49 96
http://askbot.org/

Fixed in 0.7.38. Keep trying :) thanks!

link

Comments

@Evgeny: still happens when viewing a profile page: http://askbot.org/en/users/459/piskvorky/

piskvorky (Jan 14)

Fixed this too, now need to update the repo trunk.

Evgeny (Jan 15)

Your answer

Please start posting your answer anonymously - your answer will be saved within the current session and published after you log in or create a new account. Please try to give a substantial answer, for discussions, please use comments and please do remember to vote (after you log in)!
[hide preview]

Question tools

Follow

subscribe to rss feed

Stats

Asked: Jan 10

Seen: 111 times

Last updated: Jan 10