On: Calvin and Hobbes Search Engine

[tantalor]

Found an XSS. Check your strings:

http://michaelyingling.com/random/calvin_and_hobbes/search.p...

[LeifCarrotson → tantalor]

I don't OP is the author, I've been using this for years.

[stevebmark → tantalor]

Could be SQL injectable too as an apostrophe raises an error

[tyingq → stevebmark]

I think it is. This hangs, though for more than 10 seconds:

http://michaelyingling.com/random/calvin_and_hobbes/search.p...

[svnpenn → tantalor]

Why are you the way that you are?

https://m.youtube.com/watch?v=aYmOqPFyJPw