HTML Injection

Locked
ErikHanson
Registered user
Posts: 41
Joined: 23 Jan 2016, 16:17

HTML Injection

Post by ErikHanson » 24 Jan 2016, 13:44

Bug Description:

The game reeks of HTML injection, i can literally embed youtube videos and hrefs on papers, and other places.

Steps to reproduce:

Please send me a PM to recieve a full list of files/line numbers and .patch files to patch them :)

User avatar
Gentlefood
Registered user
Posts: 540
Joined: 30 Jul 2015, 04:18

Re: HTML Injection

Post by Gentlefood » 24 Jan 2016, 13:45

Paper html injection is as old as time. I'm surprised it hasn't been fixed here yet.

User avatar
DesFrSpace
Registered user
Posts: 339
Joined: 24 May 2015, 01:54

Re: HTML Injection

Post by DesFrSpace » 24 Jan 2016, 14:18

https://www.youtube.com/watch?v=Pp_MQJ9ds-Q


Thanks for the head up though, I'm not into trolling on the web, more toward programming.

PS, I'm in charge of the CM's web page, but this is up to the staff to implement their regulation on this site.
ALPHA, BETA, OMEGA, GAMMA, SIGMA.

DEATH SQUAD!

Locked