5 ms·

Improper input sanitation, you can potentially add raw html to other people's pages (XSS).

• madhato 6y ago
  Doesn't the regex sanitize it before display?
  • some_random 6y ago
    Yes but it's pretty easily bypassed
    • madhato 6y ago
      How is it easily bypassed?
      • deleted 6y ago
        [deleted]
    • Mapsmithy 6y ago
      I asked earlier because I'm genuinely curious, but do you have a payload that would bypass this particular regex?