Possible security issue with injected JS
Reported by locriani | October 12th, 2009 @ 05:20 PM
this is an innocuous link parses out as this is an innocuous link
Comments and changes to this ticket
-
locriani October 12th, 2009 @ 05:20 PM
- Assigned user cleared.
"this is an innocuous link":javascript:alert(1)
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile »
RedCloth is a Ruby library for converting Textile into HTML
Jason Garber