Pages: 12
[color=blue][b]Description:[/b][/color] Actually our current js linker, especially the one on the current generator has a security hole that makes people be able put some kinda malicious script by ins
You are viewing a post by Ephemeral. View all 27 posts in [color=blue][b]Description:[/b][/color] Actually our current js linker, especially the one on the current generator has a security hole that makes people be able put some kinda malicious script by ins.
2008-06-29 04:31:35
- Ephemeral
- » FTalkElite
4669
0
1969-12-31
[color=blue][b]Description:[/b][/color] Actually our current js linker, especially the one on the current generator has a security hole that makes people be able put some kinda malicious script by ins
[quote=switpotato]i dont really understand this part how come a link can execute js...
aint that incomplete...[/quote]
Just follow up hehe...
It works because the extension of the script can be found on the media box. If the idea was being used by someone else.If you insert the a id part. It willl just get the ID from the XML on the media box. The best way to prevent this is to make your own XML file.
 |