Re: JavaScript Injection ???

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Stuart Dallas wrote:
On Monday, 18 April 2011 at 20:50, tedd wrote:
The form "as-is" produced a javascript alert() and now it doesn't.

This is not a browser change because it's happening before the browser sees the response (try it with curl).

It is the browser, chrome will prevent execution because the code was sent in the request, just check the javascript console and you'll see something like:

"Refused to execute a JavaScript script. Source code of script found within request."

Best,

Nathan


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux