[Skip to main content](#vessel-content) # XSS Inclusion error ## - **[provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile")** - [![provisualusa's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/8573-provisualusa "View provisualusa's Profile") Topic Author - [ Offline](/forum/user/8573-provisualusa) Less More - Posts: 29 - Thank you received: 0 - - 13 years 11 months ago [\#76520](#76520) by [provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile") Replied by *[provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile")* on topic *[XSS Inclusion error](/forum/3-bug-report/75783-xss-inclusion-error?start=20#76520 "Hello I'm having a report for xss inclusion coming from the hikashop e.g: www.samplewebsite.com/products/category/32 leather-shoes.html Please help I sure I'm not the only one out there.")* Did you get the last one Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC83NTc4My14c3MtaW5jbHVzaW9uLWVycm9yP3N0YXJ0PTIwJnRtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[Jerome](/forum/user/80-jerome "View Jerome's Profile")** - [![Jerome's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar80.png)](/forum/user/80-jerome "View Jerome's Profile") - [ Offline](/forum/user/80-jerome) - HikaShop core developer Less More - Posts: 26400 - Thank you received: 4079 - - [](http://obsi.dev) - 13 years 11 months ago [\#76521](#76521) by [Jerome](/forum/user/80-jerome "View Jerome's Profile") Replied by *[Jerome](/forum/user/80-jerome "View Jerome's Profile")* on topic *[XSS Inclusion error](/forum/3-bug-report/75783-xss-inclusion-error?start=20#76521 "Hello I'm having a report for xss inclusion coming from the hikashop e.g: www.samplewebsite.com/products/category/32 leather-shoes.html Please help I sure I'm not the only one out there.")* Hi, There is no XSS problem in the last link you sent me. The HTML tags are right encoded in the page so they are not considered as HTML and block all XSS injection possibilities. Regards, --- Jerome - Obsidev.com HikaMarket & HikaSerial developer / HikaShop core dev team. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC83NTc4My14c3MtaW5jbHVzaW9uLWVycm9yP3N0YXJ0PTIwJnRtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile")** - [![provisualusa's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/8573-provisualusa "View provisualusa's Profile") Topic Author - [ Offline](/forum/user/8573-provisualusa) Less More - Posts: 29 - Thank you received: 0 - - 13 years 11 months ago [\#76524](#76524) by [provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile") Replied by *[provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile")* on topic *[XSS Inclusion error](/forum/3-bug-report/75783-xss-inclusion-error?start=20#76524 "Hello I'm having a report for xss inclusion coming from the hikashop e.g: www.samplewebsite.com/products/category/32 leather-shoes.html Please help I sure I'm not the only one out there.")* It is modifying the head in the base= is changing to that the injection. Or may I wrong? Sorry if I don't know about this. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC83NTc4My14c3MtaW5jbHVzaW9uLWVycm9yP3N0YXJ0PTIwJnRtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[Jerome](/forum/user/80-jerome "View Jerome's Profile")** - [![Jerome's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar80.png)](/forum/user/80-jerome "View Jerome's Profile") - [ Offline](/forum/user/80-jerome) - HikaShop core developer Less More - Posts: 26400 - Thank you received: 4079 - - [](http://obsi.dev) - 13 years 11 months ago - 13 years 11 months ago [\#76527](#76527) by [Jerome](/forum/user/80-jerome "View Jerome's Profile") Replied by *[Jerome](/forum/user/80-jerome "View Jerome's Profile")* on topic *[XSS Inclusion error](/forum/3-bug-report/75783-xss-inclusion-error?start=20#76527 "Hello I'm having a report for xss inclusion coming from the hikashop e.g: www.samplewebsite.com/products/category/32 leather-shoes.html Please help I sure I'm not the only one out there.")* Hi, XSS inclusion is to type some javascript code or HTML code in the URL and that code would be print directly in the page. HikaShop replace critical tags by non HTML symbols like "<" to "&amp;lt;". That's all. There is no base changing or what ever. If you but "<strong>mytext</strong>" in the URL and you see your text in bold in your page, that's a breach. Otherwise, it's secured. With tabber, you can do it. With Joomla and HikaShop you can't. If you want to know more about XSS, you can read the wikipedia page which is quite complete [ en.wikipedia.org/wiki/Cross-site\_scripting](http://en.wikipedia.org/wiki/Cross-site_scripting) Regards, --- Jerome - Obsidev.com HikaMarket & HikaSerial developer / HikaShop core dev team. Last edit: 13 years 11 months ago by [Jerome](/forum/user/80-jerome "View Jerome's Profile"). Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC83NTc4My14c3MtaW5jbHVzaW9uLWVycm9yP3N0YXJ0PTIwJnRtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile")** - [![provisualusa's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/8573-provisualusa "View provisualusa's Profile") Topic Author - [ Offline](/forum/user/8573-provisualusa) Less More - Posts: 29 - Thank you received: 0 - - 13 years 11 months ago [\#76528](#76528) by [provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile") Replied by *[provisualusa](/forum/user/8573-provisualusa "View provisualusa's Profile")* on topic *[XSS Inclusion error](/forum/3-bug-report/75783-xss-inclusion-error?start=20#76528 "Hello I'm having a report for xss inclusion coming from the hikashop e.g: www.samplewebsite.com/products/category/32 leather-shoes.html Please help I sure I'm not the only one out there.")* Thank you so much. I just contact, The tabber dev to see if I can get any response from him. Once again thank you. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzMtYnVnLXJlcG9ydC83NTc4My14c3MtaW5jbHVzaW9uLWVycm9yP3N0YXJ0PTIwJnRtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. Board Categories HikaShop Install & Update Product & Category Display Content Creation Sales and Orders Orders management Reports & Statistics Customers Checkout Payment Methods Shipping Methods Import & Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel & Slider Mass Actions Filters & Search Discount & Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.070 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)