[Webkit-unassigned] [Bug 27895] [XSSAuditor] Inline Event Handler with single-line JavaScript comment can bypass XSSAuditor

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 17 13:37:26 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27895





--- Comment #7 from Adam Barth <abarth at webkit.org>  2009-09-17 13:37:26 PDT ---
Here's another test case for this issue:

<script>alert(1);/*<!--

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list