>    <script>window.open('http://taky.com/?d=zohcom');</script>
> 
> Use a CGI or something similar, output this data into an HTML page, and 
> you get a popup window! Very clever... talk about cross-site scripting, 
> that is.
> 
> Okay, that's gonna be a s/[<>]/ /g;

All that you really need to do is replace < with &lt;

Reply via email to