Hacker Newsnew | past | comments | ask | show | jobs | submit | Goldman's commentslogin

thanks jaachan

guys I've made a test:

http://www.lolnexus.com/scouter/search?name=sk+ocelote&serve...

player SK ocelote is playing right now on EUW server

In google chrome I've made changes to test

<input type="text" class="span7" name="name" autofocus="autofocus" onchange="javascript:this.value=this.value.toLowerCase();" placeholder="Enter a player currently in an active match" style="height:30px;">

name="name" to name="fewnfewo"

name="name" to name="sk ocelote"

name="name" to abc="name"

neither one works

the GET need's to be to work http://www.lolnexus.com/scouter/search?name=sk+ocelote&serve...

the last one abc="name" sends get:

http://www.lolnexus.com/scouter/search?server=EUW

I'm asking myself if there is a possibility of exploit from client side? But I don't have required knowledges to recognize.

ps: this is just an example from a real application. Trying to explain what I've thought.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: