search

Sterc / FormIt

A dynamic form processing Snippet for MODX Revolution
https://docs.modx.com/current/en/extras/formit
33 stars 58 forks source link

Some fixes #74

Closed Jako closed 8 years ago

Jako commented 8 years ago

The most important one is avoiding XSS attacks by htmlspecialchars. I really don't know why this issue could stay that long in the code. FormIt contains only a strip_tags securing its fields (a bit).

Without that patch you could create XSS attacks by posting xsstest=%22+onMouseOver%3D%22alert%281%29%3B to a form with the following input

<input id="xsstest" name="xsstest" type="text" value="[[!+fi.xsstest]]">

It contains the following text after

<input id="xsstest" name="xsstest" type="text" value="" onMouseOver="alert(1);">