5 ms·

Sorry, would you mind explaining what this will do?

• thepete2 6y ago
  Improper input sanitation, you can potentially add raw html to other people's pages (XSS).
  • madhato 6y ago
    Doesn't the regex sanitize it before display?
    • some_random 6y ago
      Yes but it's pretty easily bypassed
      • madhato 6y ago
        How is it easily bypassed?
        • deleted 6y ago
          [deleted]
      • Mapsmithy 6y ago
        I asked earlier because I'm genuinely curious, but do you have a payload that would bypass this particular regex?