search

archimag / cliki2

25 stars 13 forks source link

User can use pure js-code as username #8

Closed alder closed 12 years ago

alder commented 12 years ago

Steps to reproduce:

  1. Register new user and fill username with: < script >alert(1);< /script >
  2. Finish registration.
  3. You will be redirected to home page.

You can see popup window with text "1". Browser: Firefox 8.0

vsedach commented 12 years ago

Fixed. Thank you for the bug report!