{"issue":{"created_at":"2011-11-22T02:31:49Z","state":"open","updated_at":"2011-11-22T02:31:49Z","user":{"gravatar_id":"6f9b3dba6517bc769d8e5fde4d25d57e","id":1211852,"url":"https://api.github.com/users/derricke","avatar_url":"https://secure.gravatar.com/avatar/6f9b3dba6517bc769d8e5fde4d25d57e?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"derricke"},"comments":0,"body":"$notes is pulled from db as: <script>alert('hi');</script>\r\nrun through filter gives: &lt;script&gt;alert('hi');&lt;/script&gt;\r\n\r\nphp code with htmlentiies() and addslashes()\r\necho '<td onmouseover=\"alter_tooltip(\\'Reason: '. addslashes(htmlentities($notes'])).'\\');\">\r\ntooltips replaces all of the filtered characters back and the script actually runs.\r\n\r\nsourcecode from actual page:\r\n<td onmouseover=\"alter_tooltip('Reason: &lt;script&gt;alert(\\'hi\\');&lt;/script&gt;');\">\r\n\r\nIt looks like tooltips is removing the filtering and onmouseover runs the alert.\r\n\r\nThis is a pretty big issue as it will allow xss attacks and stolen cookies etc.\r\n\r\n","assignee":null,"id":2313814,"pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"number":569,"labels":[],"title":"tooltips not XSS compliant","closed_at":null,"html_url":"https://github.com/jquerytools/jquerytools/issues/569","url":"https://api.github.com/repos/jquerytools/jquerytools/issues/569","milestone":null},"action":"opened"}