Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stored Cross Site Scripting (XSS) fix #5

Closed
wants to merge 1 commit into from
Closed

Stored Cross Site Scripting (XSS) fix #5

wants to merge 1 commit into from

Conversation

ad-m
Copy link

@ad-m ad-m commented Oct 20, 2015

Hello,

I am would like recommend to fix Stored Cross Site Scripting flaw.

Stored Cross Site Scripting attacks happen when the application doesn’t validate user inputs against malicious scripts, and it occurs when these scripts get stored on the database. Victim gets infected when they visit web page that loads these malicious scripts from database. For instances, message forum, comments page, visitor logs, profile page, etc.

Read more about Stored XSS: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)#Stored_XSS_Attacks

I am glad that I helped to make web more secure. Merge please.

Greetings,

@mik-laj
Copy link

mik-laj commented Oct 20, 2015

I do not understand why you call me.

@ad-m
Copy link
Author

ad-m commented Oct 20, 2015

@mik-laj , I don't understand what do you want here. I hope that helped.

@s4n7h0
Copy link
Owner

s4n7h0 commented Oct 20, 2015

hey @ad-m the idea of this application is to understand XSS issues, try exploit them, and see what went wrong in the code. It's basically an application that can help security enthusiast to learn application security. I appreciate your intention though. Would be great if you want to write a simple blog post, how you observe the bad code here, exploited the it, and fixed the same ;)

@s4n7h0 s4n7h0 closed this Oct 20, 2015
@s4n7h0 s4n7h0 added the spam label Oct 3, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants