17.6.05

%5F

There is a forum.blogging tool that we use – Community Server, but I think I just found a flaw. If there is an underscore (_) in a username the whole thing breaks L

It took me awhile to figure this out as there was %5F being put into the url, here is a useful page for looking at URL encoding and a simple decoder javascript

No comments: