Re: JavaScript Injection ???
| From: | Nathan Rixham | Date: | Mon, 25 Apr 2011 23:12:31 +0000 |
| Subject: | Re: JavaScript Injection ??? | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-312484@lists.php.net to get a copy of this message | ||
Stuart Dallas wrote:
On Monday, 18 April 2011 at 20:50, tedd wrote:It is the browser, chrome will prevent execution because the code was sent in the request, just check the javascript console and you'll see something like: "Refused to execute a JavaScript script. Source code of script found within request." Best, NathanThe form "as-is" produced a javascript alert() and now it doesn't.This is not a browser change because it's happening before the browser sees the response (try it with curl).