Closed
Bug 1351214
Opened 9 years ago
Closed 9 years ago
xss reflected
Categories
(Core :: General, defect)
Core
General
Tracking
()
RESOLVED
INVALID
People
(Reporter: andreasheeneluna, Unassigned)
Details
Attachments
(1 file)
|
35.82 KB,
image/png
|
Details |
xssmozilla.png
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20170316213829
Steps to reproduce:
i try to entext and xss script in a browser and its reflected
Actual results:
it will reflect to xss
Expected results:
xss reflected
|
||
Comment 1•9 years ago
|
||
This appears to be a valid data: URL doing what the specification says data: urls should do. Maybe there's missing context here?
see also bug 255107 and more recently bug 1324406
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Resolution: --- → INVALID
|
||
Comment 2•8 years ago
|
||
Moving from Core::Untriaged to Core::General https://bugzilla.mozilla.org/show_bug.cgi?id=1407598
Component: Untriaged → General
You need to log in
before you can comment on or make changes to this bug.
Description
•