3 ms·

Those all look like XSS vulnerabilities to me.

• gingerlime 13y ago
  Of course this is a pretty good starting point to find XSS, but I still see quite a few false positives: the first result I see currently: https://github.com/matsprehn/122B/blob/1d54d2a72f25a23d63ff77edaac65b814043c7c7/js/footer.js https://github.com/matsprehn/122B/blob/1d54d2a72f25a23d63ff7... also spotted this, which looks pretty harmless: https://github.com/cameroni2003/picgrid/blob/0b3becda1f250ef598a0fd72ac101dd08f0892a2/js/globals.js https://github.com/cameroni2003/picgrid/blob/0b3becda1f250ef... a lot others look similar, plus it depends on context...
  • btipling 13y ago
    Yes, sure. Those two do not reveal vulnerabilities just from the results, but I have to wonder at not using templates on the first.