Questions tagged [xss]

for posts related to cross-site scripting (XSS) vulnerabilities. Instead of posting them publicly, please report security vulnerabilities which affect many users through the contact form at https://stackoverflow.com/contact, and include the words "security vulnerability".

20
votes
2answers
434 views

How is my browser protected from XSS in Stack Snippets?

Firefox 32.0.2 with NoScript and AdBlockEdge. Steps I have done to enable Stack Snippets: Allowed scripts from http?://stacksnippets.net In NoScript settings, went to XSS tab and added exceptions ...
4
votes
0answers
57 views

XSS security problems [duplicate]

"><style>.ask-title-cell-value input {background:black;color:white;}</style> This first line is just to demonstrate the XSS. Related bug: <marquee>XSS hole in timeline page</...
21
votes
1answer
158 views

Auto-suggestions with HTML on stack overflow causes rendering issues

I was entering an issue on Stack Overflow and one of the auto-suggestions had HTML in the title, and it seemed to break the rendering in my browser. I'm using the latest stable FireFox for Windows 8....
26
votes
2answers
246 views

XSS bug in mobile link

I'm totally frustrated. I reported this using the procedure mentioned in the FAQ but the confirmation email sent me back to the original form. There is XSS on every page of Stack Overflow. Injecting ,...
4
votes
1answer
122 views

Xss behaviour SO api

I have a custom html that pulls the latest SO question via the api: <script type="text/javascript"> function insertReply(content) { output = document.getElementById('...
0
votes
0answers
161 views

Information about Stack Exchange sanitizer for Markdown (XSS)

How does Stack Exchange sanitize the user's text to prevent XSS injections? I've seen that if I write: (this is the doc about this bug) > hello <a name="n" > href="javascript:alert('...
12
votes
2answers
271 views

Review history appears not to escape HTML tags in titles of now-deleted questions for users without the privilege to view most deleted questions

I found this bug when looking at my review history. I found that the page shows the title of one of my reviews as: How do I stretch the middle height in a three- layout? In three lines, rather than ...
-15
votes
1answer
850 views

Potential XSS Vulnerability

I just thought I'd let everyone know that I found a bug in the comments (and possibly questions as well). I went to post a comment in webmasters and I put < noscript > in it and instead of it just ...
6
votes
1answer
56 views

Titles not properly encoded in the /posts/<id>/ajax-load-mini?title=true route

The route used to refresh the question after live update notifications doesn't properly encode the question title, which likely provides a limited opportunity for script injection. In a more ...
16
votes
1answer
134 views

XSS on Web site URL of Careers

Edit: Fixed! http://careers.stackoverflow.com/smark
17
votes
1answer
444 views

XSS in Ask Question page

Copy paste following in browser bar, https://stackoverflow.com/questions/ask?title=test"><script>alert(1)</script>"&tags="></a></div><script>alert(/1/)</...
8
votes
1answer
141 views

HTML in Favorite and Ignored Tags

If you add "'><h1> to either Favorite Tags or Ignored Tags on the home page, it'll insert the HTML into the page and break the page layout. Also, after refreshing the page, some new tags will ...
15
votes
1answer
509 views

<marquee>XSS hole in timeline page</marquee> - comments are not HTML/XML escaped

See for example here (marquee) and here (input and select). For historical reasons, here's a screen of the last one ;) Related bugs: XSS hole in activity page
14
votes
1answer
2k views

xss vulnerability on careers.stackoverflow.com

A Reddit article with a demonstration of a XSS vulnerability on careers.stackoverflow.com Unsure if this is duplicate - have searched a handful of ways on meta -- "xss careers" and more, but had no ...
11
votes
1answer
404 views

XSS in the chat room name that are displayed in MSO

The recent chat feature that was added recently has a XSS flaw in it. For testing purpose, I created a chat room called <b>123</b> and as you can see in the screenshot below, the <b> ...
7
votes
1answer
315 views

How is input sanitized in the SOFU World?

Is the sanitizer that keeps us safe from nefarious things like <script>alert('evil here');</script> public/available?