2 ms·
Which raises the best question: how would you exploit someone not escaping single quotes? I do not know. Perhaps it isn't possible.
by hawkice 8y ago
Which raises the best question: how would you exploit someone not escaping single quotes? I do not know. Perhaps it isn't possible.
- jscissr 8y agoI think escaping quotes only matters for attributes (which can use ' or "). Example: <img src="$url"> Exploit: foo.jpg" onload="alert('pwned')
- kuroguro 8y agoHeh, found the exact bug on a live bbcode parser some 5 years ago.
- codedokode 8y agoIt was probably written using regexps? One should make full syntax analysis instead of writing regexp hacks.