3 comments

[ 3.4 ms ] story [ 18.0 ms ] thread
The first search result is <script>alert('David')</script>.

This is coming from one of the oldest, largest search engines on the web? I'm pretty astounded.

It's already been reported. Credit where credit is due: http://www.reddit.com/r/xss/comments/jvc70/httpwwwaskcom_xss...

Oldest I agree but Largest?
How many people running IE 6 have an Ask toolbar hidden up there somewhere? Sure, it only has 1.7% of total searches on the web, but I'd wager that their user base probably does far less searches than say, Google's user base.