blog.alexmaccaw.com/a-javascript-security-flaw

Preview meta tags from the blog.alexmaccaw.com website.

Linked Hostnames

6

Search Engine Appearance

Google

https://blog.alexmaccaw.com/a-javascript-security-flaw

A JavaScript Security Flaw

The following is a JavaScript security flaw: <script> var str = "</script><script>alert('Pwned');</script>"; </script> Don't believe me? Try it for yourself [http://f.cl.ly/items/2c2D0V1T0D150P2B173R/pwned.html]. The browser ignores the fact that the <script> tags are inside a JavaScript String, invoking the alert() function. The reason for this odd behavior is</script>



Bing

A JavaScript Security Flaw

https://blog.alexmaccaw.com/a-javascript-security-flaw

The following is a JavaScript security flaw: <script> var str = "</script><script>alert('Pwned');</script>"; </script> Don't believe me? Try it for yourself [http://f.cl.ly/items/2c2D0V1T0D150P2B173R/pwned.html]. The browser ignores the fact that the <script> tags are inside a JavaScript String, invoking the alert() function. The reason for this odd behavior is</script>



DuckDuckGo

https://blog.alexmaccaw.com/a-javascript-security-flaw

A JavaScript Security Flaw

The following is a JavaScript security flaw: <script> var str = "</script><script>alert('Pwned');</script>"; </script> Don't believe me? Try it for yourself [http://f.cl.ly/items/2c2D0V1T0D150P2B173R/pwned.html]. The browser ignores the fact that the <script> tags are inside a JavaScript String, invoking the alert() function. The reason for this odd behavior is</script>

  • General Meta Tags

    7
    • title
      A JavaScript Security Flaw
    • charset
      utf-8
    • viewport
      width=device-width, initial-scale=1
    • referrer
      no-referrer-when-downgrade
    • article:published_time
      2012-08-09T00:00:00.000Z

  • Open Graph Meta Tags

    5
    • og:site_name
      Alex MacCaw
    • og:type
      article
    • og:title
      A JavaScript Security Flaw
    • og:description
      The following is a JavaScript security flaw: <script> var str = "</script><script>alert('Pwned');</script>"; </script> Don't believe me? Try it for yourself [http://f.cl.ly/items/2c2D0V1T0D150P2B173R/pwned.html]. The browser ignores the fact that the <script> tags are inside a JavaScript String, invoking the alert() function. The reason for this odd behavior is</script>
    • og:url
      https://blog.alexmaccaw.com/a-javascript-security-flaw/

  • Twitter Meta Tags

    8
    • twitter:card
      summary
    • twitter:title
      A JavaScript Security Flaw
    • twitter:description
      The following is a JavaScript security flaw: <script> var str = "</script><script>alert('Pwned');</script>"; </script> Don't believe me? Try it for yourself [http://f.cl.ly/items/2c2D0V1T0D150P2B173R/pwned.html]. The browser ignores the fact that the <script> tags are inside a JavaScript String, invoking the alert() function. The reason for this odd behavior is</script>
    • twitter:url
      https://blog.alexmaccaw.com/a-javascript-security-flaw/
    • twitter:label1
      Written by

  • Link Tags

    8
    • alternate
      https://blog.alexmaccaw.com/rss/
    • amphtml
      https://blog.alexmaccaw.com/a-javascript-security-flaw/amp/
    • canonical
      https://blog.alexmaccaw.com/a-javascript-security-flaw/
    • preconnect
      https://fonts.gstatic.com
    • stylesheet
      https://blog.alexmaccaw.com/assets/built/screen.css?v=80d263b12d

Links

11