6 ms·
Oh I see. This makes sense. This doesn't seem challenging to prevent. A simple replacement of characters on the HTML entity table would have prevented this inst
by _RPM 12y ago
Oh I see. This makes sense. This doesn't seem challenging to prevent. A simple replacement of characters on the HTML entity table would have prevented this instead of putting arbitrary text onto standard output.
- 0x0 12y agoYep, missing that is what makes this an "XSS" :)
- finnn 12y agoCorrect. The purpose of this post is to demonstrate yet another class of website that does not validate user input.
- finnn 12y agoCorrect. The purpose of this post is to demonstrate yet another class of website that does not validate user input.