Skip to main content

Unmoderated Comments With JavaScript References

We have seen reports from several Bloggers that anonymous posters are making unmoderated comments to their blogs, containing a JavaScript reference, which redirects the reader to another web site. Right now, the reference, and the redirection, appears to be used for pumping up the reputation in individual quotes in QDB.com, but it doesn't require a lot of imagination to see how versatile this vulnerability could be in the long run.

Start by immediately moderating all blog comments, until this vulnerability is fixed.

>> Blogger Employee says
I pass it along (again) and we'll see if we can do anything about this.


>> (Update 7/6 10:00): Blogger Employee says
We made some changes to address the vulnerability issue (yesterday) so this should no longer be a problem.


>> Forum thread links: bX-*00055

>> Copy this tag: bX-*00055

>> Top

Comments

jjh said…
I have this problem on my blog, any word from Google if they're doing anything abou t it?

Popular posts from this blog

Stats Components Are Significant, In Their Own Context

One popular Stats related accessory, which displays pageview information to the public, is the "Popular Posts" gadget.

Popular Posts identifies from 1 to 10 of the most popular posts in the blog, by comparing Stats pageview counts. Optional parts of the display of each post are a snippet of text, and an ever popular thumbnail photo.

Like many Stats features, blog owners have found imaginative uses for "Popular Posts" - and overlook the limitations of the gadget. Both the dynamic nature of Stats, and the timing of the various pageview count recalculations, create confusion, when Popular Posts is examined.

What's The URL Of My Blog?

We see the plea for help, periodicallyI need the URL of my blog, so I can give it to my friends. Help!Who's buried in Grant's Tomb, after all?No Chuck, be polite.OK, OK. The title of this blog is "The Real Blogger Status", and the title of this post is "What's The URL Of My Blog?".

Leave Comments Here

Like any blogger, I appreciate polite comments, when they are relevant to the blog, and posted to the relevant article in the right blog. If you want to ask me a question thats relevant to blogging, but you can't find the right post to start with (I haven't written about everything blogger related, yet, nor the way things are going I don't expect to either), ask your questions here, or leave an entry in my guestbook.

As noted above, please note my commenting policy. If you post a comment to this post, I will probably treat it as a "Contact Me" post. If you have an issue that's relevant to any technical issue in the blog, please leave a comment on the specific post, not here. This post is for general comments, and for non posted contact to me.

If the form below does not work for you, check your third party cookies setting!

For actual technical issues, note that peer support in Blogger Help Forum: Something Is Broken, or Nitecruzr Dot Net - Blogging is, almos…