Dynmap: Potential XSS attack

Created on 6 Jul 2018  路  3Comments  路  Source: webbukkit/dynmap

When username is <script>alert("Hello")</script>

The web page pops up a message box

VERSION: 2.5

Bug Fixed
Source
picture Military-Doctor

Most helpful comment

Should be fixed in today's dev builds for 2.6 and 3.0

picture mikeprimm on 8 Jul 2018
👍2

All 3 comments

Seems like somebody else brought it up in #2088
cc @mikeprimm

jwshields picture jwshields on 6 Jul 2018

Should be fixed in today's dev builds for 2.6 and 3.0

mikeprimm picture mikeprimm on 8 Jul 2018
👍2

Thanks.

Military-Doctor picture Military-Doctor on 10 Jul 2018
Was this page helpful?
0 / 5 - 0 ratings

Related issues

fuwwy picture fuwwy  路  3Comments
idlenexusgaming picture idlenexusgaming  路  4Comments
ThybeVB picture ThybeVB  路  6Comments
MissFox0810 picture MissFox0810  路  3Comments
Lachney picture Lachney  路  3Comments