© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Adding horizon-coresec for debunking...
As the report stands, it hardly qualifies as XSS since the output is not HTML but JSON... I don't see why you would HTML-encode that output ? Or can you leverage the same bug on HTML output ?