Re: XSS in search form at git-scm.com
From: Paul Betts <hidden>
Date: 2016-06-15 22:53:49
Hi Anton, Bugs for git-scm.com are tracked on GitHub, please file your issue at https://github.com/github/gitscm-next/issues. -- Paul Betts [off-list ref] On Fri, May 11, 2012 at 5:28 AM, Anton [off-list ref] wrote:
Hello. Search form at git-scm.com is vulnerable to XSS. Short link bit.ly/KQ2Tcd http://bit.ly/K7VvJM Real links alert http://git-scm.com/search/results?search=%3Cscript%3Ealert('privet%20Lambda%20:peka:%20_/')%3C/script%3E Google logo http://bit.ly/K7VvJM -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html