Sign in / up

back to article Researcher details nasty XSS flaw in popular web editor

A tool that's popular with Microsoft's in-house developers, the RadEditor HTML editor, contains a dangerous cross-site scripting (XSS) vulnerability, researcher GS McNamara says. The editor was developed by Telerik and used in trusted in-house code in many big enterprises and across Redmond products including MSDN, CodePlex, …

COMMENTS

Post your comment
House rules Send corrections
Add to 'My topics' unstar *
  1. Anonymous Coward
    Devil

    hmmmm

    I wonder if he's been specifically prohibited from doing the same tests on healthcare.gov ?

    0 0 Reply
    1. GSMcNamara
      Reply Icon

      Re: hmmmm

      Can't say of course :)

      1 0 Reply
  2. Anonymous Coward
    Anonymous Coward

    correction

    8 IPs != DDoS... and a small DoS is all you need to take out a typical WP site.

    0 0 Reply
    1. GSMcNamara
      Reply Icon

      Re: correction

      >1 bot

      0 0 Reply

POST COMMENT House rules

Not a member of The Register? Create a new account here.

Forgotten password ?

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like