You can get reflected XSS in that field. Paste "<script>alert('XSS')</script>" in the "Value to sha1" input box. Darren, you should check out output encoding.
You can get reflected XSS in that field. Paste "<script>alert('XSS')</script>" in the "Value to sha1" input box. Darren, you should check out output encoding.