This repository has been archived by the owner on Mar 5, 2024. It is now read-only.

Security issue: XSS #16

Open

globalworming opened this issue Jul 23, 2014 · 0 comments

Labels

bug

Member

globalworming commented Jul 23, 2014

https://www.owasp.org/index.php/Top_10_2013-A3-Cross-Site_Scripting_%28XSS%29
http://sourceforge.net/p/sahi/code/HEAD/tree/trunk/sahi/src/net/sf/sahi/command/Log.java#l80

Unescaped parameters: http://localhost:9999/s/dyn/Log_highlight?href=http://ha.ckers.org/xss.js?%3C/h4%3E%3Cimg%20src=http://placekitten.com/200/300%3E

globalworming added the bug label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.