Cross-site Scripting issue

telephone / LookingGlass

A user-friendly PHP Looking Glass

MIT License

1.25k stars 345 forks source link

Closed ghost closed 9 years ago

ghost commented 10 years ago

Hi mate!

Your app suffer from a Cross-site Scripting (XSS) issue. File: index.php Line: 62 Vuln:

You should clean the inputs prior to print them to screen.

Cheers!

ghost commented 10 years ago

index.php:62 href="<?php echo $_SERVER['REQUEST_URI']; ?>"><?php echo $siteName; ?>

telephone commented 9 years ago

Fixed in bbfb2ea