0

I found the following code on this page. Is this indicative of a security problem.

;}else{str=" Following ";}
document.getElementById("follow_"+count).innerHTML=str;} 
function checkLoginForFollowWidget(root_imageurl,company_id,flag,count)
{ajaxController.isUserAuthenticated(function(response){if(response!=null){i

I got this when I submitted null search box. Is this a vulnerability? I think displaying the code on the main page is like code is getting exposed on the webpage?

When I put this in Google search, I get many websites having such information on their webpage.

  • 2
    Is this your code? Please provide additional information. It uses AJAX and we do not know how the serverside code looks like. I do not see any real results for ajaxController.isUserAuthenticate in Google. – Daniel Ruf Nov 29 '15 at 15:10
  • 1
    For me it looks like a social media widget (Twitter?). I think there is nothing to worry about. – Daniel Ruf Nov 29 '15 at 15:18
  • This i got displayed on the main webpage while i submited null by writing "null" in search button so is this vulnerable because i think displaying the code on the main page is like code is getting exposed on the webpage ?? – Newbie1 Nov 29 '15 at 15:57
  • @DanielRuf Please let me know – Newbie1 Nov 29 '15 at 15:57
  • 1
    Please provide further details where you got the code from, how you implement it and how your search works. null is so far not dangerous. If you mean XSS, there are many known strings to test for XSS. Please provide some URL if possible. – Daniel Ruf Nov 29 '15 at 16:01
2

Seems to be by mistake, I saw it on many of these small job boards / platforms but not on other websites.

The code looks like some part of a social media widget which was pasted in a job posting by accident as it seems.

Also the code is harmless.

Not the answer you're looking for? Browse other questions tagged or ask your own question.