HTML tags in Summoner Search

Comment below rating threshold, click here to show it.

KazuoRyuhei

Member

06-26-2013

I'm using a Mac Mini running OS X 10.8.3. But I tested this out on a Windows 7 machine and it also has this.

While trying to search for possible names to get a name change, I found that I am able to use html tags, such as Bold, Underlined and Anchor text. Just posting this just in case this may lead to something serious like XSS.

Here are screenshots of the search results:

BOLD => http://i.imgur.com/AJN95zY.png

UNDERLINED => http://i.imgur.com/QVaadgj.png

ANCHOR text => http://i.imgur.com/rFHW5AG.png

PS: The anchor text, when clicked, opens in a browser too!

Edit: Javascript also works: <a href="JavaScript:window.close()">Close</a> (this does not close the client)
Hope this helps.