injection <script>alert("xss");</script>
just testing script injection :-)
<script>alert("xss");</script>Fixed in 0.7.38. Keep trying :) thanks!
@Evgeny: still happens when viewing a profile page: http://askbot.org/en/users/459/piskvorky/
Fixed this too, now need to update the repo trunk.
To enter a block of code:
Comments
Viewing this page gives me a browser alert. I guess that's not desirable, so I'm adding a "bug" tag.
Highly undesirable, will fix asap.