<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Matt Bernier &#187; Matt Bernier &#8211;  A Denver entrepreneur, Denver WordPress developer, WordPress Plugin creator, and PHP developer</title>
	<atom:link href="http://www.mkbernier.com/tag/trim/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mkbernier.com</link>
	<description>A Denver entrepreneur, trying to get a project to stick, and talking about people</description>
	<lastBuildDate>Mon, 23 Jan 2012 16:00:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Trim, I love your service, but please sanitize your inputs!!</title>
		<link>http://www.mkbernier.com/2009/02/05/trim-i-love-your-service-but-please-sanitize-your-inputs/</link>
		<comments>http://www.mkbernier.com/2009/02/05/trim-i-love-your-service-but-please-sanitize-your-inputs/#comments</comments>
		<pubDate>Fri, 06 Feb 2009 05:25:19 +0000</pubDate>
		<dc:creator>Matt Bernier</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[192]]></category>
		<category><![CDATA[basic Google]]></category>
		<category><![CDATA[basic html]]></category>
		<category><![CDATA[continuation]]></category>
		<category><![CDATA[developers]]></category>
		<category><![CDATA[dissapear]]></category>
		<category><![CDATA[document body]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[html]]></category>
		<category><![CDATA[humor]]></category>
		<category><![CDATA[images]]></category>
		<category><![CDATA[information]]></category>
		<category><![CDATA[Javascript]]></category>
		<category><![CDATA[job]]></category>
		<category><![CDATA[lt]]></category>
		<category><![CDATA[Matt Bernier]]></category>
		<category><![CDATA[s]]></category>
		<category><![CDATA[second thought]]></category>
		<category><![CDATA[Services]]></category>
		<category><![CDATA[thougt]]></category>
		<category><![CDATA[tinyurl]]></category>
		<category><![CDATA[tr.im]]></category>
		<category><![CDATA[tweet]]></category>
		<category><![CDATA[twenty minutes]]></category>
		<category><![CDATA[Twitter]]></category>
		<category><![CDATA[urge]]></category>

		<guid isPermaLink="false">http://www.mkbernier.com/?p=189</guid>
		<description><![CDATA[I was replying to a friend on Twitter using trim, and I had a &#60;script&#62; tag in the post.  I realized when I submitted that the tag made everything after it in my tweet dissapear. If you want to see the actual tweets, you can find them in my twitter feed here: Matt Bernier&#8217;s Twitter Feed First thougt was, &#8220;No Way!&#8221;.  Second thought was, &#8220;What Else Can I do?&#8221;. So, I tried basic HTML with this tweet: &#60;h2&#62;Testing whether HTML breaks tr.im&#60;/h2&#62; B/c my &#60;script&#62; tag did earlier&#60;/script&#62; &#60;span style=&#34;color:blue;&#34;&#62; ScreenShot coming&#60;/script&#62; This got me this result: Then I tried an alert: &#60;script type=&#34;text/javascript&#34;&#62; alert(&#39;does this work?&#39;); &#60;/script&#62; That got me this result: Then lastly, I tried a little more... <a href="http://www.mkbernier.com/2009/02/05/trim-i-love-your-service-but-please-sanitize-your-inputs/">&#187; Read More</a>]]></description>
			<content:encoded><![CDATA[<!-- sphereit start --><p>I was replying to a friend on Twitter using trim, and I had a &lt;script&gt; tag in the post.  I realized when I submitted that the tag made everything after it in my tweet dissapear.  If you want to see the actual tweets, you can find them in my twitter feed here: <a href="http://twitter.com/mbernier">Matt Bernier&#8217;s Twitter Feed</a></p>
<p>First thougt was, &#8220;No Way!&#8221;.  Second thought was, &#8220;What Else Can I do?&#8221;.</p>
<p>So, I tried basic HTML with this tweet:</p>
<div class="geshi no html">
<ol>
<li class="li1">
<div class="de1">&lt;h2&gt;Testing whether HTML breaks tr.im&lt;/h2&gt; B/c my
</div>
</li>
<li class="li1">
<div class="de1">&lt;script&gt; tag did earlier&lt;/script&gt;
</div>
</li>
<li class="li1">
<div class="de1">&lt;span style=&quot;color:blue;&quot;&gt; ScreenShot coming&lt;/script&gt;</div>
</li>
</ol>
</div>
<p>This got me this result:</p>
<div id="attachment_192" class="wp-caption aligncenter" style="width: 310px"><a href="http://www.mkbernier.com/wp-content/uploads/2009/02/trim.jpg"><img class="size-medium wp-image-192" title="trim" src="http://www.mkbernier.com/wp-content/uploads/2009/02/trim-300x144.jpg" alt="Just HTML in the Tweet" width="300" height="144" /></a><p class="wp-caption-text">Just HTML in the Tweet</p></div>
<p>Then I tried an alert:</p>
<div class="geshi no html">
<ol>
<li class="li1">
<div class="de1">&lt;script type=&quot;text/javascript&quot;&gt;
</div>
</li>
<li class="li1">
<div class="de1">alert(&#39;does this work?&#39;);
</div>
</li>
<li class="li1">
<div class="de1">&lt;/script&gt;</div>
</li>
</ol>
</div>
<p>That got me this result:</p>
<div id="attachment_190" class="wp-caption aligncenter" style="width: 310px"><a href="http://www.mkbernier.com/wp-content/uploads/2009/02/alert.jpg"><img class="size-medium wp-image-190" title="alert" src="http://www.mkbernier.com/wp-content/uploads/2009/02/alert-300x127.jpg" alt="Javascript Alert in a tweet" width="300" height="127" /></a><p class="wp-caption-text">Javascript Alert in a tweet</p></div>
<p>Then lastly, I tried a little more JS, pay attention though. To make it fit, I used a tr.im URL!!</p>
<div class="geshi no html">
<ol>
<li class="li1">
<div class="de1">&lt;script type=&quot;text/javascript&quot;&gt;
</div>
</li>
<li class="li1">
<div class="de1">document.body.select(&#39;img&#39;).each(function(e){e.src=&quot;http://tr.im/evmz&quot;});
</div>
</li>
<li class="li1">
<div class="de1">alert(&#39;check the images&#39;)
</div>
</li>
<li class="li1">
<div class="de1">&lt;/script&gt;</div>
</li>
</ol>
</div>
<p>Which got me this result:</p>
<div id="attachment_191" class="wp-caption aligncenter" style="width: 310px"><a href="http://www.mkbernier.com/wp-content/uploads/2009/02/images.jpg"><img class="size-medium wp-image-191" title="images" src="http://www.mkbernier.com/wp-content/uploads/2009/02/images-300x179.jpg" alt="Replaced Tr.im's images with Google's!" width="300" height="179" /></a><p class="wp-caption-text">Replaced Tr.im&#39;s images with Google&#39;s!</p></div>
<p>I have submitted this information to tr.im.  I did very mundane, topical things to the page I was looking at, and did not even attempt anything more dangerous.  <del datetime="2009-02-06T06:39:09+00:00">My hope is that you will see the humor in this, urge tr.im to fix this issue and to continue the amazing job that they do.</del></p>
<p><b>UPDATE:</b> The Tr.im developers are quick to read their emails, respond, and fix issues.  It took all of twenty minutes from when I sent the email to them, for a response saying that this issue was fixed.</p>
<!-- sphereit end --><span style="margin-bottom:40px; border-bottom:none;"><a class="iconsphere" title="Sphere: Related Content" onclick="return Sphere.Widget.search('http://www.mkbernier.com/2009/02/05/trim-i-love-your-service-but-please-sanitize-your-inputs/')" href="http://www.sphere.com/search?q=sphereit:http://www.mkbernier.com/2009/02/05/trim-i-love-your-service-but-please-sanitize-your-inputs/">Sphere: Related Content</a></span><br/><br/>]]></content:encoded>
			<wfw:commentRss>http://www.mkbernier.com/2009/02/05/trim-i-love-your-service-but-please-sanitize-your-inputs/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

