Text only | Text with Images

Clan x86

Off topic/Crap => Trash Can => Topic started by: Joe on January 03, 2006, 05:55:06 PM

Title: IMG exploit?
Post by: Joe on January 03, 2006, 05:55:06 PM
(http://www.javaop.com/blah.jpg"><!--)

hm (//http://)
Title: Re: IMG exploit?
Post by: Newby on January 03, 2006, 06:57:05 PM
Quote from: Joe[e2] on January 03, 2006, 05:55:06 PM
(http://www.javaop.com/blah.jpg"><!--)

hm (//http://)

???
Title: Re: IMG exploit?
Post by: Joe on May 08, 2006, 05:55:23 PM
[img]http://www.javaop.com/blah.jpg"><!--[/img]

[url=http://www.javaop.com">hm<!--]hm[/url]



Was wondering how it translated a BBCode IMG tag into a HTML IMG tag.
Title: Re: IMG exploit?
Post by: iago on May 09, 2006, 08:14:41 AM
Quote from: Joe on May 08, 2006, 05:55:23 PM
[img]http://www.javaop.com/blah.jpg"><!--[/img]

[url=http://www.javaop.com">hm<!--]hm[/url]



Was wondering how it translated a BBCode IMG tag into a HTML IMG tag.

By filtering out special characters like ", >, and <, replacing them with &quot;, &gt;, and &lt;.
Text only | Text with Images