Questions tagged [xss]
for posts related to cross-site scripting (XSS) vulnerabilities. Instead of posting them publicly, please report security vulnerabilities which affect many users through the contact form at https://stackoverflow.com/contact, and include the words "security vulnerability".
16
questions
21
votes
2
answers
590
views
How is my browser protected from XSS in Stack Snippets?
Firefox 32.0.2 with NoScript and AdBlockEdge.
Steps I have done to enable Stack Snippets:
Allowed scripts from http?://stacksnippets.net
In NoScript settings, went to XSS tab and added exceptions ...
- 6,236
4
votes
0
answers
62
views
XSS security problems [duplicate]
"><style>.ask-title-cell-value input {background:black;color:white;}</style>
This first line is just to demonstrate the XSS.
Related bug: <marquee>XSS hole in timeline page</...
- 921
21
votes
1
answer
177
views
Auto-suggestions with HTML on stack overflow causes rendering issues
I was entering an issue on Stack Overflow and one of the auto-suggestions had HTML in the title, and it seemed to break the rendering in my browser. I'm using the latest stable FireFox for Windows 8....
- 459
26
votes
2
answers
260
views
XSS bug in mobile link
I'm totally frustrated. I reported this using the procedure mentioned in the FAQ but the confirmation email sent me back to the original form.
There is XSS on every page of Stack Overflow. Injecting ,...
4
votes
1
answer
127
views
Xss behaviour SO api
I have a custom html that pulls the latest SO question via the api:
<script type="text/javascript">
function insertReply(content) {
output = document.getElementById('...
- 143
0
votes
0
answers
178
views
Information about Stack Exchange sanitizer for Markdown (XSS)
How does Stack Exchange sanitize the user's text to prevent XSS injections?
I've seen that if I write: (this is the doc about this bug)
> hello <a name="n"
> href="javascript:alert('...
- 223
12
votes
2
answers
279
views
Review history appears not to escape HTML tags in titles of now-deleted questions for users without the privilege to view most deleted questions
I found this bug when looking at my review history. I found that the page shows the title of one of my reviews as:
How do I stretch the middle
height in a three-
layout?
In three lines, rather than ...
- 3,467
-16
votes
1
answer
1k
views
Potential XSS Vulnerability
I just thought I'd let everyone know that I found a bug in the comments (and possibly questions as well). I went to post a comment in webmasters and I put < noscript > in it and instead of it just ...
- 103
6
votes
1
answer
58
views
Titles not properly encoded in the /posts/<id>/ajax-load-mini?title=true route
The route used to refresh the question after live update notifications doesn't properly encode the question title, which likely provides a limited opportunity for script injection.
In a more ...
- 58.2k
16
votes
1
answer
137
views
17
votes
1
answer
453
views
XSS in Ask Question page
Copy paste following in browser bar,
https://stackoverflow.com/questions/ask?title=test"><script>alert(1)</script>"&tags="></a></div><script>alert(/1/)</...
- 25.4k
8
votes
1
answer
152
views
HTML in Favorite and Ignored Tags
If you add "'><h1> to either Favorite Tags or Ignored Tags on the home page, it'll insert the HTML into the page and break the page layout. Also, after refreshing the page, some new tags will ...
- 181
15
votes
1
answer
525
views
<marquee>XSS hole in timeline page</marquee> - comments are not HTML/XML escaped
See for example here (marquee) and here (input and select).
For historical reasons, here's a screen of the last one ;)
Related bugs:
XSS hole in activity page
user138231
14
votes
1
answer
2k
views
xss vulnerability on careers.stackoverflow.com
A Reddit article with a demonstration of a XSS vulnerability on careers.stackoverflow.com
Unsure if this is duplicate - have searched a handful of ways on meta -- "xss careers" and more, but had no ...
- 1,043
11
votes
1
answer
428
views
XSS in the chat room name that are displayed in MSO
The recent chat feature that was added recently has a XSS flaw in it. For testing purpose, I created a chat room called <b>123</b> and as you can see in the screenshot below, the <b> ...
- 3,061
7
votes
1
answer
323
views
How is input sanitized in the SOFU World?
Is the sanitizer that keeps us safe from nefarious things like <script>alert('evil here');</script> public/available?
- 1,672