This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author Craig.Younkins
Recipients Craig.Younkins, docs@python
Date 2010-06-23.18:22:40
SpamBayes Score 0.004269702
Marked as misclassified No
Message-id <>
Proof of concept:
print """<body class='%s'></body>""" % cgi.escape("' onload='alert(1);' bad='")
Date User Action Args
2010-06-23 18:22:42Craig.Younkinssetrecipients: + Craig.Younkins, docs@python
2010-06-23 18:22:42Craig.Younkinssetmessageid: <>
2010-06-23 18:22:40Craig.Younkinslinkissue9061 messages
2010-06-23 18:22:40Craig.Younkinscreate