Lab Name and Exp Name in the Feeback URL is not validated

vlead / feedback-portal

This is the portal, where all kinds of feedback related to a lab or an experiment is filled in.

Other

0 stars 11 forks source link

Open madhavipuliraju opened 6 years ago

madhavipuliraju commented 6 years ago

In the URL normal user can insert any type of data, special character, XSS scripts. The inserted script reflected on the application. url

madhavipuliraju commented 6 years ago