[GH-ISSUE #18] Cross-site Scripting issue #14

Closed
opened 2026-02-28 00:40:09 +03:00 by kerem · 2 comments
Owner

Originally created by @ghost on GitHub (Feb 16, 2014).
Original GitHub issue: https://github.com/telephone/LookingGlass/issues/18

Hi mate!

Your app suffer from a Cross-site Scripting (XSS) issue.
File: index.php
Line: 62
Vuln:

You should clean the inputs prior to print them to screen.

Cheers!

Originally created by @ghost on GitHub (Feb 16, 2014). Original GitHub issue: https://github.com/telephone/LookingGlass/issues/18 Hi mate! Your app suffer from a Cross-site Scripting (XSS) issue. File: index.php Line: 62 Vuln: <h1><a id="title" href="<?php echo $_SERVER['REQUEST_URI']; ?>"><?php echo $siteName; ?></a></h1> You should clean the inputs prior to print them to screen. Cheers!
kerem 2026-02-28 00:40:09 +03:00
  • closed this issue
  • added the
    v1
    label
Author
Owner

@ghost commented on GitHub (Feb 16, 2014):

index.php:62 href="">

<!-- gh-comment-id:35180733 --> @ghost commented on GitHub (Feb 16, 2014): index.php:62 href="<?php echo $_SERVER['REQUEST_URI']; ?>"><?php echo $siteName; ?>
Author
Owner

@telephone commented on GitHub (Jan 26, 2015):

Fixed in bbfb2ea

<!-- gh-comment-id:71420618 --> @telephone commented on GitHub (Jan 26, 2015): Fixed in bbfb2ea
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/LookingGlass#14
No description provided.