News for hackers. Stuff that matters.

A comment on XSS in Google Finance. Parent comment

Re:XSS in Google Finance by xSwag on Tuesday July 30, 2013 @06:45PM (#6130619)
Automatic analysis would have to be amazing to detect something like this. I'm assuming this was found manually. I wonder how long it took.
[ Parent | on HN ]
Re:XSS in Google Finance by orf on Tuesday July 30, 2013 @07:15PM (#6130765)
It really wouldn't, URL's like this in parameters are a huge red flag for both humans and automated tools. Any half decent analyzer would just need to see that parameter in any page it scraped.
[ Parent | on HN ]