Skip to content

Instantly share code, notes, and snippets.

@jesboat

jesboat/oops.php

Last active December 15, 2015 03:59
Show Gist options
  • Save jesboat/5198575 to your computer and use it in GitHub Desktop.
Save jesboat/5198575 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
oops.php
<?php
$a = "blah blah blah --";
$b = "img src=http://jesnetplus.com/evil.js width=400 height=400 alt=hi";
?>
<!DOCTYPE html>
<meta http-equiv="Content-type" content="text/html; charset=utf-8">
<title>Broken</title>
<p>First paragraph
<!-- begin comment
<some tag attr=<?= htmlspecialchars($a) ?>>
<<?= htmlspecialchars($b) ?>>
-->
<p>Second paragrah
Raw
result.html
<!DOCTYPE html>
<meta http-equiv="Content-type" content="text/html; charset=utf-8">
<title>Broken</title>
<p>First paragraph
<!-- begin comment
<some tag attr=blah blah blah -->
<img src=http://jesnetplus.com/evil.js width=400 height=400 alt=hi>
-->
<p>Second paragrah
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment