Forgot your password?
Forgot your username?
I cannot use getVar because the var can be anything at all.
As for the demo site, can't you see the TEST" /> beside the sorteer op dropdown? Text has been insterted in the page. I know its not html but still...
Please Log in to join the conversation.
getVar is supposed to get any value, sanitized.
Sure you can see the 'TEST" >' on the page but it is not html anymore so it can't be used for XSS