Lehekülje Mall:XSS alert/doc lähteteksti vaatamine

<noinclude>{{Documentation subpage}}
{{timw|{{PAGENAME}}}}
</noinclude>
-------------
;Description: Adds an alert box describing a [[mw:en:Cross-site scripting|Cross-site scripting]] vulnerability in including Extension page.  Also adds including page to [[mw:Category:Extensions with XSS vulnerabilities]]
;If your extension was tagged with this template please read:
*[[mw:Security for developers]]
*[[mw:Cross-site scripting]]
;Example:
<pre>
{{XSS alert|~~~~}}
</pre>
;Creates:
{{security alert
|problem=Vulnerable to '''[[mw:en:Cross-site scripting|Cross-site scripting]] attacks''', because it passes user input directly to the browser. This may lead to '''user accounts being hijacked''', among other things.
|solution=strictly validate user input and/or apply escaping to all characters that have a special meaning in [[mw:en:HTML|HTML]]
|signed=[[User:Duesentrieb|Duesentrieb]] [[User talk:Duesentrieb|⇌]] 13:43, 22 March 2007 (UTC)
|nocat=1
}}
<includeonly>
[[Category:Message templates|{{PAGENAME}}]]
<!-- PUT HERE THE CATEGORIES OF THE TEMPLATE -->
</includeonly>