Hacker News new | past | comments | ask | show | jobs | submit | joesmoe4297's comments login

You can get reflected XSS in that field. Paste "<script>alert('XSS')</script>" in the "Value to sha1" input box.

Darren, you should check out output encoding.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: