Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 157 Stack Exchange communities.

What is meta?
Here's how it works:
  1. Any Stack Exchange user can ask a question
  2. The community provides support, votes on ideas, and reports bugs
  3. Your voice helps shape the way Stack Exchange operates

The recent chat feature that was added recently has a XSS flaw in it. For testing purpose, I created a chat room called <b>123</b> and as you can see in the screenshot below, the <b> tags weren't escaped.

alt text

share|improve this question
9  
You should probably illustrate the importance of this bug by making a chat room that causes people on meta to automatically upvote this post – Michael Mrozek Oct 11 '10 at 16:09
up vote 7 down vote accepted

Nice catch. I guess someone owes you a beer next time you meet in The Tavern<script>alert('General')</script>.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .