XSS Vulnerability

[monkeym4ster]

Payload

• http://ami.responsivedesign.is/?url=javascript:alert(1)
• http://ami.responsivedesign.is/?url=data:text/html,<script>alert(1)</script>
• http://ami.responsivedesign.is/?url=data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
• ...

Fix

am-i-responsive/index.html

Line 142 in a46ac86

if(first === "undefined") {

if(first === "undefined" || first.indexOf('http') === -1) { // Non http(s) protocol
  // don't do anything.
}
else {
//  take the url variable and update the iframes and input field
  $("iframe").attr('src',(first));
  $('#url').attr('value',(first));
  $.ajax({ url: 'xtest.php?url=' + first + '',
           data: {action: first},
           type: 'post',
           success: function(output) {
                        console.log(output);
                    }
  });
}