You might want to sanitize the placeholder attribute on the results page - in it... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

s_m on Oct 9, 2012 | parent | context | favorite | on: I made a 'search engine' for fun

You might want to sanitize the placeholder attribute on the results page - in its current state, it is susceptible to XSS.

vu0tran on Oct 9, 2012 [–]

Thanks for the tip. I was trying to remember what XSS was.

http://foobub.com/?s=xss

Bam. Foobub.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact