Re: Re: Sourceforge.net XSS

From: <v9_at_fakehalo.us>
Date: 13 Apr 2006 20:02:37 -0000

('binary' encoding is not supported, stored as-is) I understand the possibilities of XSS, however if you have to inject it as part of the URL line to have it display the injection i don't see how you are going to fool people, maybe encode it? otherwise it will be quite obvious, and it would have to be something small after being encoded. another thing it isn't something people will "stroll" across and view. I guess it still "counts" as a vulnerability. *shrug*
Received on Apr 13 2006