News for hackers. Stuff that matters.

A comment on Ask HN: please review my tool for rewrite rule testing. Parent comment

Re:Ask HN: please review my tool for rewrite rule testing by nbpoole on Wednesday December 29, 2010 @10:42AM (#2048952)
The RewriteRules are also vulnerable to XSS. Try entering

  RewriteRule . /index.php<script>alert(document.location)</script> [L]
and submitting a URL.
[ Parent | on HN ]

There are no comments on this comment yet.