Built-in XSLT templates can allow cross-site scripting

2008-12-15T00:00:00
ID OPERA:924
Type opera
Reporter Opera
Modified 2008-12-15T00:00:00

Description

Built-in XSLT templates incorrectly handle escaped content and can cause it to be treated as markup. If a site accepts content from untrusted users, which it then displays using XSLT as escaped strings, this can allow scripted markup to be injected. The scripts will then be executed in the security context of that site.