➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author Craig.Younkins
Recipients Craig.Younkins, docs@python
Date 2010-06-23.18:22:40
SpamBayes Score 0.004269702
Marked as misclassified No
Message-id <1277317362.05.0.143587672652.issue9061@psf.upfronthosting.co.za>
In-reply-to
Content 
Proof of concept:
print """<body class='%s'></body>""" % cgi.escape("' onload='alert(1);' bad='")
History
Date User Action Args
2010-06-23 18:22:42Craig.Younkinssetrecipients: + Craig.Younkins, docs@python
2010-06-23 18:22:42Craig.Younkinssetmessageid: <1277317362.05.0.143587672652.issue9061@psf.upfronthosting.co.za>
2010-06-23 18:22:40Craig.Younkinslinkissue9061 messages
2010-06-23 18:22:40Craig.Younkinscreate