# XSS in search form at git-scm.com 3 messages from 2012-05-11 to 2012-05-13. Participants: Anton, Jeff King, Paul Betts. Thread: https://gitlist.dev/t/30508 ## Anton, 2012-05-11 12:28 Subject: XSS in search form at git-scm.com Message-ID: URL: https://gitlist.dev/e/CANurz1edia5ctzRn9b%3DH-VZX6o%3DbmEiS2WMbqyQTXN0VrhYtcA%40mail.gmail.com ``` Hello. Search form at git-scm.com is vulnerable to XSS. Short link bit.ly/KQ2Tcd http://bit.ly/K7VvJM Real links alert http://git-scm.com/search/results?search=%3Cscript%3Ealert('privet%20Lambda%20:peka:%20_/')%3C/script%3E Google logo http://bit.ly/K7VvJM ``` ## Jeff King, 2012-05-11 21:51 Subject: Re: XSS in search form at git-scm.com Message-ID: <20120511215133.GA20371@sigill.intra.peff.net> URL: https://gitlist.dev/e/20120511215133.GA20371%40sigill.intra.peff.net In-Reply-To: ``` On Fri, May 11, 2012 at 04:28:39PM +0400, Anton wrote: > Search form at git-scm.com is vulnerable to XSS. Thanks, this is a known issue and has just been fixed: https://github.com/github/gitscm-next/issues/45 -Peff ``` ## Paul Betts, 2012-05-13 03:14 Subject: Re: XSS in search form at git-scm.com Message-ID: URL: https://gitlist.dev/e/CALaqWPBB-sriFro%3D6TBDJ53y9Y%3D-1vMYEzEutOGcDs9tLEekFg%40mail.gmail.com In-Reply-To: ``` Hi Anton, Bugs for git-scm.com are tracked on GitHub, please file your issue at https://github.com/github/gitscm-next/issues. -- Paul Betts On Fri, May 11, 2012 at 5:28 AM, Anton wrote: > Hello. > > Search form at git-scm.com is vulnerable to XSS. > > Short link > > bit.ly/KQ2Tcd > http://bit.ly/K7VvJM > > Real links > alert > http://git-scm.com/search/results?search=%3Cscript%3Ealert('privet%20Lambda%20:peka:%20_/')%3C/script%3E > Google logo > http://bit.ly/K7VvJM > -- > To unsubscribe from this list: send the line "unsubscribe git" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at  http://vger.kernel.org/majordomo-info.html ```