Προβολή πηγαίου κώδικα για τη σελίδα Πρότυπο:XSS alert

{{security alert
|problem={{{problem|Vulnerable to '''[[mw:en:Cross-site scripting|Cross-site scripting]] attacks''', because it passes user input directly to the browser. This may lead to '''user accounts being hijacked''', among other things.}}}
|solution={{{solution|strictly validate user input and/or apply escaping to all characters that have a special meaning in [[mw:en:HTML|HTML]].}}}
|signed={{{signed|{{{1||}}}}}}
|nocat=1
}}<includeonly>[[Category:Extensions with XSS vulnerabilities]]</includeonly>
<noinclude>{{documentation}}</noinclude>