git/list[1] front-page[2] threads[3] people[4] search[5] about
 

XSS in search form at git-scm.com

From
AAnton <forshr@gmail.com>
Date
May 11, 2012, 12:28 UTC
Message-ID
<CANurz1edia5ctzRn9b=H-VZX6o=bmEiS2WMbqyQTXN0VrhYtcA@mail.gmail.com>
Hello.
Search form at git-scm.com is vulnerable to XSS.
Short link

bit.ly/KQ2Tcd http://bit.ly/K7VvJM

Real links alert http://git-scm.com/search/results?search=%3Cscript%3Ealert('privet%20Lambda%20:peka:%20_/')%3C/script%3E Google logo http://bit.ly/K7VvJM

Next: Jeff King
Message 1 of 3 in “XSS in search form at git-scm.com”
  1. AntonMay 11, 2012
  2. Jeff KingMay 11, 2012
  3. Paul BettsMay 13, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.