in reply to Re^2: Interpolation of variables in stored HTML
in thread Interpolation of variables in stored HTML

Anonymous Monk is right. If a hacker can put anything at all into your webpage they can insert JavaScript, a tag with a style attribute that imports a tracking URL to monitor other users who view the info in the future, or this one if the data goes to the DB: Exploits of a Mom.

  • Comment on Re^3: Interpolation of variables in stored HTML

In Section Seekers of Perl Wisdom