Timeline for The CheckMarx security scanner says that this lines is a Stored XSS vulnerability
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 2, 2014 at 6:34 | comment | added | sfdcfox♦ | I missed this comment originally, but while you're mostly right, one could put in a closing style tag followed by malicious JavaScript. Not much, since fields are limited to 255 characters, but enough to do some harm. | |
| Jul 29, 2014 at 11:21 | comment | added | Uwe Heim | Hi @sfdcfox, there is a preceeding #, so I guess he is only going for the hex-notation. Therefore a easy regex could be a good measure. | |
| Jul 29, 2014 at 6:54 | history | answered | sfdcfox♦ | CC BY-SA 3.0 |