XSSImage : WOImage {
src = "someImage.gif";
alt = "\"><script>alert('Hi')</script>";
}Problem is, when that content come from a database and nothing prevents this kind of input.
The question is: Is this a bug or (because of any reason) a feature? Oliver
<<attachment: os.vcf>>
_______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
