What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 130 Stack Exchange communities.

The recent chat feature that was added recently has a XSS flaw in it. For testing purpose, I created a chat room called <b>123</b> and as you can see in the screenshot below, the <b> tags weren't escaped.

alt text

share|improve this question
9  
You should probably illustrate the importance of this bug by making a chat room that causes people on meta to automatically upvote this post –  Michael Mrozek Oct 11 '10 at 16:09

1 Answer 1

up vote 7 down vote accepted

Nice catch. I guess someone owes you a beer next time you meet in The Tavern<script>alert('General')</script>.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .