Re: XSS in search form at git-scm.com

From: Jeff King <peff@peff.net>
Date: May 11, 2012, 21:51 UTC
Message-ID: <20120511215133.GA20371@sigill.intra.peff.net>
In-Reply-To: <CANurz1edia5ctzRn9b=H-VZX6o=bmEiS2WMbqyQTXN0VrhYtcA@mail.gmail.com>

On Fri, May 11, 2012 at 04:28:39PM +0400, Anton wrote:

> Search form at git-scm.com is vulnerable to XSS.

Thanks, this is a known issue and has just been fixed:

  https://github.com/github/gitscm-next/issues/45

-Peff

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.