Re:FourSquare switches from Google Maps to Open Street Map
by StavrosK on Thursday March 01, 2012 @06:55AM
(#3651766)
It's not:
http://www.engadget.com/2012/03/01/foursquare-replaces-googl...
Interestingly, Chrome doesn't execute that because it finds the source of the script in the request. Good XSS avoidance idea.
Re:FourSquare switches from Google Maps to Open Street Map
by 5h on Thursday March 01, 2012 @09:59AM
(#3652291)
I tried that in chrome too, saw it didnt work and presumed the site handled it, not my browser, IE9 avoids it as well, even shows a little popup saying the site has been modified to prevent xss, latest FF still displays the alert though.
Re:FourSquare switches from Google Maps to Open Street Map
by spullara on Thursday March 01, 2012 @12:40PM
(#3653096)
Safari also appears to prevent the alert. Must be built into WebKit.
Re:FourSquare switches from Google Maps to Open Street Map
by nopeqq on Thursday March 01, 2012 @12:54PM
(#3653152)
Nope. Ipad show the text
Re:FourSquare switches from Google Maps to Open Street Map
by JeremyBanks on Thursday March 01, 2012 @09:53AM
(#3652266)
They escape single- and double-quotes, what else is there to worry about?
tried (albeit briefly) to re-write it to get to the desktop version, failed a couple of times before i spotted the desktop link at the bottom, which looks to append ?m=false, and now the first piece of content in the body element is the word "false", presumably debugging stuff, hope that's sanitised properly!