League of Legends Community

League of Legends Community (http://forums.na.leagueoflegends.com/board/index.php)
-   Mac Client (http://forums.na.leagueoflegends.com/board/forumdisplay.php?f=31)
-   -   HTML tags in Summoner Search (http://forums.na.leagueoflegends.com/board/showthread.php?t=3596679)

KazuoRyuhei 06-26-2013 09:52 AM

HTML tags in Summoner Search
I'm using a Mac Mini running OS X 10.8.3. But I tested this out on a Windows 7 machine and it also has this.

While trying to search for possible names to get a name change, I found that I am able to use html tags, such as Bold, Underlined and Anchor text. Just posting this just in case this may lead to something serious like XSS.

Here are screenshots of the search results:

BOLD => http://i.imgur.com/AJN95zY.png

UNDERLINED => http://i.imgur.com/QVaadgj.png

ANCHOR text => http://i.imgur.com/rFHW5AG.png

PS: The anchor text, when clicked, opens in a browser too!

Edit: Javascript also works: <a href="JavaScript:window.close()">Close</a> (this does not close the client)
Hope this helps.

All times are GMT -8. The time now is 10:26 PM.

(c) 2008 Riot Games Inc