0

When I try to create an account on my site the following error message is sent:

a potential dangerous value Request. Path had been detected from the client (<).

I have no clue why this happens. Any one that has a clue? (my piece of code is below):

enter image description here

Albert Lazaro de Lara
  • 2,540
  • 6
  • 26
  • 41
  • 1
    Possible duplicate of [A potentially dangerous Request.Path value was detected from the client (\*)](https://stackoverflow.com/questions/5967103/a-potentially-dangerous-request-path-value-was-detected-from-the-client) – jirig May 06 '18 at 14:58
  • While I commend your use of `htmlspecialchars`, I must point out that `https://example.com/your_page_here.php?hax=' onclick='alert("XSS!")` will still work. Better to just use `
    ` if you want a postback like this.
     – Niet the Dark Absol May 06 '18 at 15:46

1 Answers1

0

You have a < symbol in a url, which is not exactly valid. It seems to be the same issue as here.

jirig
  • 551
  • 6
  • 21