{"thread":{"id":"30508","subject":"XSS in search form at git-scm.com","startedAt":"2012-05-11T12:28:39Z","lastAt":"2012-05-13T03:14:26Z","messageCount":3,"participants":["Anton","Jeff King","Paul Betts"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"191391","messageId":"CANurz1edia5ctzRn9b=H-VZX6o=bmEiS2WMbqyQTXN0VrhYtcA@mail.gmail.com","threadId":"30508","inReplyTo":null,"subject":"XSS in search form at git-scm.com","fromName":"Anton","fromEmail":"forshr@gmail.com","sentAt":"2012-05-11T12:28:39Z","receivedAt":"2012-05-11T12:28:39Z","isPatch":false,"sender":{"key":"forshr@gmail.com","avatar":null},"body":"Hello.\n\nSearch form at git-scm.com is vulnerable to XSS.\n\nShort link\n\nbit.ly/KQ2Tcd\nhttp://bit.ly/K7VvJM\n\nReal links\nalert\nhttp://git-scm.com/search/results?search=%3Cscript%3Ealert('privet%20Lambda%20:peka:%20_/')%3C/script%3E\nGoogle logo\nhttp://bit.ly/K7VvJM\n"},{"id":"191420","messageId":"20120511215133.GA20371@sigill.intra.peff.net","threadId":"30508","inReplyTo":"CANurz1edia5ctzRn9b=H-VZX6o=bmEiS2WMbqyQTXN0VrhYtcA@mail.gmail.com","subject":"Re: XSS in search form at git-scm.com","fromName":"Jeff King","fromEmail":"peff@peff.net","sentAt":"2012-05-11T21:51:33Z","receivedAt":"2012-05-11T21:51:33Z","isPatch":false,"sender":{"key":"peff@peff.net","avatar":"https://avatars.githubusercontent.com/u/45925?v=4"},"body":"On Fri, May 11, 2012 at 04:28:39PM +0400, Anton wrote:\n\n> Search form at git-scm.com is vulnerable to XSS.\n\nThanks, this is a known issue and has just been fixed:\n\n  https://github.com/github/gitscm-next/issues/45\n\n-Peff\n"},{"id":"191463","messageId":"CALaqWPBB-sriFro=6TBDJ53y9Y=-1vMYEzEutOGcDs9tLEekFg@mail.gmail.com","threadId":"30508","inReplyTo":"CANurz1edia5ctzRn9b=H-VZX6o=bmEiS2WMbqyQTXN0VrhYtcA@mail.gmail.com","subject":"Re: XSS in search form at git-scm.com","fromName":"Paul Betts","fromEmail":"paul@paulbetts.org","sentAt":"2012-05-13T03:14:26Z","receivedAt":"2012-05-13T03:14:26Z","isPatch":false,"sender":{"key":"paul@paulbetts.org","avatar":"https://gravatar.com/avatar/0a6b8d841f415926d3822428107890edb67a784a62ddd8da6f3ec19074bd5024?d=mp&s=160"},"body":"Hi Anton,\n\nBugs for git-scm.com are tracked on GitHub, please file your issue at\nhttps://github.com/github/gitscm-next/issues.\n\n-- \nPaul Betts <paul@paulbetts.org>\n\nOn Fri, May 11, 2012 at 5:28 AM, Anton <forshr@gmail.com> wrote:\n> Hello.\n>\n> Search form at git-scm.com is vulnerable to XSS.\n>\n> Short link\n>\n> bit.ly/KQ2Tcd\n> http://bit.ly/K7VvJM\n>\n> Real links\n> alert\n> http://git-scm.com/search/results?search=%3Cscript%3Ealert('privet%20Lambda%20:peka:%20_/')%3C/script%3E\n> Google logo\n> http://bit.ly/K7VvJM\n> --\n> To unsubscribe from this list: send the line \"unsubscribe git\" in\n> the body of a message to majordomo@vger.kernel.org\n> More majordomo info at  http://vger.kernel.org/majordomo-info.html\n"}]}