4 ms·
Some Uber intern probably made that form and didn't know what sanitizing inputs was about. Good find - but easy fix. You usually can't get away with XSS attacks
by nsx147 11y ago
Some Uber intern probably made that form and didn't know what sanitizing inputs was about. Good find - but easy fix. You usually can't get away with XSS attacks anymore
- uberhacked 11y agoUber told me they used WordPress to build their petition sites. Maybe other WordPress sites are vulnerable?
- noeltock 11y agoWordPress has plenty of functions to sanitize, the one who made the theme or dropped in the form probably overlooked it.