Other nomination
Image Names Gone Bad
Uploaded image filenames become XSS vectors where the name is re-emitted into HTML or JavaScript: one breaks out of an img tag with a script element, two more close a quote to land in script context. FreeBSD accepts such names where Windows will not. A dropped RSnake comment adds a high-bit US-ASCII variant.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.