3 ms·
It allows you to put javascript in a click handler: http://www.apple.com/itunes/affiliates/download/?artistName=%3Cimg%20src=%22http://cheapestblog.info/wp-con
by willwagner 17y ago
It allows you to put javascript in a click handler:
http://www.apple.com/itunes/affiliates/download/?artistName=%3Cimg%20src=%22http://cheapestblog.info/wp-content/uploads/2009/06/click-me.jpg%22%20onclick=%22alert%28%27hello%20world%27%29;%22/%3E http://www.apple.com/itunes/affiliates/download/?artistName=...
- adrinavarro 17y agoI was wrong, you're right! Now that's medium-insecure. But still not to panic at this, just XSS and client-side (everything is inserted by JS). Well, there are worst things, right? :)
- chrisbroadfoot 17y ago"just" XSS?
- NathanKP 17y agoOn Safari the click handler works but the image just shows up as an error, not a "Click Me" message.