Website Issues Archived · read-only

Started by EndenDragon · 08-23-2015 · 3 posts

08-23-2015, 11:19 AM (This post was last modified: 08-25-2015, 05:51 AM by skeight.) #1
I have no idea where to put this- so I'm putting it here.

Over the years I have studied HTML and remembered the infamous youtube comment injection. So in an effort to see if Minecraft World Map has any flaws, I managed to upload a few test worlds and added html codes into the "Sponsored URL" box.

But before I did that, I did a bit of research and view the source of the Canterlot map I have uploaded and see how the sponsered download works. Command+F and a search of the word "Download" made me found this line of code.

[EDIT]

Please keep in mind- I am just testing to see the flaw, not inject the site with malicious code.

Please fix the issue as if anyone else who does it- they might actually set malicious code into the website and people can get viruses from them.
08-24-2015, 11:29 PM (This post was last modified: 08-24-2015, 11:32 PM by Nathangorr.) #2
Thank you for this report, I'm going to email Skeight about this now.
08-25-2015, 05:53 AM #3
Much appreciated for letting me know about it, I'll have a look. I edited your post so we're not telling everyone how to do it.

Users browsing this thread: 1 Guest(s) (when it was saved)