[myexperiment-hackers] FogBugz (Case 98981) Inbox - Injection vulnerabilities

[bugs]

A new case was assigned to you in FogBugz.

From:         Jiten Bhagat <address@hidden>
Case ID:      98981
Title:        Injection vulnerabilities
Project:      Inbox
Area:         Undecided
Priority:     3 - Very Important
Release:      Current

URL:          http://bugs.myexperiment.org/default.php?98981

A mail notification has been received from: Jiten Bhagat <address@hidden>.
_________________________________________
Email Subject: Injection vulnerabilities

It's possible to inject some Javascript into the title for a Pack and
then have it take effect in certain places.

The bit for generating the Pack link in the 'contributable' method ...
_________________________________________


If you do not want to receive automatic notifications from FogBugz anymore, 
change your preferences in the Options screen. 
(http://bugs.myexperiment.org/default.php?pg=pgPrefs)