> the following executes custom html.
>
> http://127.0.0.1:8888/%3Cscript%3Edocument.write('test');%3C/script%3E

True - for example :
http://127.0.0.1:8888/%3Cscript%3Edocument.write('test1%3cH1%3etest2%3c/H1%3
e');%3C/script%3E
The code that displays the "Unexpected key" page should really HTMLise the
string in case it contains < > " ' © etc symbols, otherwise such symbols
will make their way directly into the HTML of the page!


_______________________________________________
devl mailing list
[EMAIL PROTECTED]
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to