Skip to content

Comment on A real case of Bobby Tables?parent

Comments

There is one! https://www.legislation.gov.uk/uksi/2015/17/schedule/1/made

It allows : / . < > and " though which is enough to allow XSS.

Strangely, though, they don't allow lower case letters.

And yes, you can register a company named > LIMITED and someone has https://find-and-update.company-information.service.gov.uk/c...

Hilariously they had first registered their name as "PREVIOUS COMPANY NAME LTD" and then changed the name to "> LIMITED" just for the joke.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.