-
Notifications
You must be signed in to change notification settings - Fork 29
XSS #1
Open
Description
Interesting project! I found this little thing:
Input:
{ "foo": "bar", "test": "<script>alert()</script>" }
Output:
1"><tr><th>foo</th><td>bar</td></tr><tr><th>test</th><td><script>alert()</script></td></tr></table>
The <script>alert()</script> should be encoded to avoid XSS.
Metadata
Metadata
Assignees
Labels
No labels