4 ms·
Its pretty terrible that a big site like Yelp would be open to a Cross Site Scripting attack.
by al_james 16y ago
Its pretty terrible that a big site like Yelp would be open to a Cross Site Scripting attack.
- tptacek 16y agoMost are.
- what 16y agoIt's scary actually. It's become so easy for anyone to build a site/app, but most people are clueless when it comes to security. Even the basics, like validating and sanitizing inputs and outputs. Couple this with the "I have to release before my competitors do" mentality and you end up with a gaping hole that you can just walk through. If your site is big enough, you should hire an expert.
- tptacek 16y agoWelcome to the last 30 years of the technology industry. We have t-shirts!