Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv


Webmaster at destiney said:

I pasted the following example XSS code into both form fields, and saw
no evidence of XSS vulnerabilities:

<DIV STYLE="background-image: url(javascript:alert('XSS'))">


According to the XSS cheat *** at http://ha.ckers.org/xss.html,
STYLE attributes in DIV tags are only effective in the Internet
Explorer rendering engine (they worked fine for me in IE but not
mozilla).

Were you using IE when you checked these results?

- Steve