News for hackers. Stuff that matters.

A comment on Cross-Site Scripting? In PHP Notices? It's more likely than you think. Parent comment

Re:Cross-Site Scripting? In PHP Notices? It's more likely th... by georgefox on Thursday August 18, 2011 @09:06AM (#2899020)
I know what you mean, but the link you provided doesn't actually seem to be doing any HTML encoding.
[ Parent | on HN ]
Re:Cross-Site Scripting? In PHP Notices? It's more likely th... by nbpoole on Thursday August 18, 2011 @09:15AM (#2899051)
Haha, whoops! Sorry about that, back to normal. Anyone who hit that URL in the past 10 minutes would have seen unsanitized HTML, because I was testing the impact of disabling the html_errors INI option (something one of my blog's comments asked about). I've updated the blog post to discuss html_errors as well. ;-)
[ Parent | on HN ]