XSS on demo

Ken Horn ken.horn at clara.co.uk
Mon May 23 04:34:40 PDT 2005


fyi, the http error line (if I return a 500, say), is echo'd exactly on 
the demo page -- ie cross site scriptable.



More information about the yadis mailing list