3 ms·
It has nothing to to do with TXT record, it's just the website that render html. It could be any source.
by Thaxll 12y ago
It has nothing to to do with TXT record, it's just the website that render html. It could be any source.
- jxf 12y agoIt's related because it's not conventionally thought of as user input that needs to be sanitized (but, of course, it should be).
- jonknee 12y agoIt has everything to do with the TXT record... Every XSS could be summed up with "just the website that renders HTML", but that's pretty much the point. TXT records aren't often thought of as input and as you can see several sites made that mistake of assumption.