search

Codgic / codgic-web-legacy

:bug: A free, open-source Online Judge alternative. Coding Magic.
GNU General Public License v3.0
13 stars 1 forks source link

搜索页面xss #14

Closed t123yh closed 7 years ago

t123yh commented 7 years ago

觉非 蒲: https://cwoj.org/search.php?t=1&q=fuck%20%22);%3C/script%3E%3Cscript%3Ealert(%27xss%27);%3C/script%3E%20(%22fuck

codgician commented 7 years ago

请测试一下，不确定是否彻底修复。