Cross-Site Scripting Worm Floods MySpace

This is why WordPress.com strips Javascript from posts. The potential for devilment is limitless without filtering!

3 thoughts on “Cross-Site Scripting Worm Floods MySpace”

Dotan Dimet (1 comments.) on October 27, 2005 at 4:20 pm said:

The potential for devilment is pretty high even with filtering, it seems: MySpace are also pretty vigorous in removing Javascript from any text entered by the user. It’s worth reading the description of how the specific exploit was done over here: http://namb.la/popular/tech.html and asking yourself if something like that could get past your own (or Worpress’) filters.

Reply ↓
Donncha (1707 comments.) on October 28, 2005 at 1:56 pm said:

Thanks Dotan, that made for a scary read!

Reply ↓
omfg click here (1 comments.) on November 28, 2005 at 7:47 pm said:

holy pj i fucking adore u

Reply ↓