4 ms·

They don't escape the query text field - XSS. http://github.com/codesearch?q=%22%3E%3Cscript%3Ealert http://github.com/codesearch?q=%22%3E%3Cscript%3Ealert(%22

They don't escape the query text field - XSS. http://github.com/codesearch?q=%22%3E%3Cscript%3Ealert http://github.com/codesearch?q=%22%3E%3Cscript%3Ealert(%22Oops%22)%3C%2Fscript%3E%3Cspan%20%22&repo=&langOverride=&language=&x=0&y=0

defunkt 18y ago
Thanks, fixed.
- cosmo7 18y ago
  Would be more impressive if the pagination worked too. Do you test any of this?