Posted July 16, 200519 yr well it has the potential for cross site scripting but putting {url}www.{url=www.s=''style='top:expression(eval(this.sss));'sss=`alert('weeeepopup');this.sss=null`s='}{/url}{/url}' (copy and paste, then replace curly brackets with square ones) into a post, when it is viewed a message box saying "weeeepopup" will appear (or whatever you want it to say) this only works when the viewer is using internet explorer, if viewed from firefox, everything from top:expression is viewed as text, so the tag can be used to hide it example: http://briggsy.org/bbb/viewtopic.php?t=2
July 16, 200519 yr http://www.phpbb.com/phpBB/viewtopic.php?p=1669130#1669130 hahaha that's ridiculous
July 16, 200519 yr Author omfgk said: http://www.phpbb.com/phpBB/viewtopic.php?p=1669130#1669130 hahaha that's ridiculous needs more square brackets....
July 16, 200519 yr greeneyes said: needs more square brackets.... i found it after it was posted here. i was gonna make my own, but someone beat me to it i guess. :gaysex:
