# Cross Site Scripting (XSS) Software Attack

**URL:** <http://forum.companieshouse.gov.uk/t/cross-site-scripting-xss-software-attack/3355>\
**Category:** Uncategorized\
**Created:** [October 19, 2020, 10:37pm UTC](http://forum.companieshouse.gov.uk/t/cross-site-scripting-xss-software-attack/3355 "2020-10-19T22:37:03Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![voracityemail](http://forum.companieshouse.gov.uk/letter_avatar_proxy/v4/letter/v/b77776/32.png) [@voracityemail](http://forum.companieshouse.gov.uk/u/voracityemail)\
**Post date:** [October 20, 2020, 12:32pm UTC](http://forum.companieshouse.gov.uk/t/cross-site-scripting-xss-software-attack/3355/5 "2020-10-20T12:32:09Z")

</div>

Not strictly on this topic but might be worth mentioning the following - if nothing else to remind people to check their own parsing and security. It’s still not uncommon to find issues with this across an application…:

(The following is a small selection of “varieties” - some have appeared elsewhere on this forum, see later)

10542519 - ; DROP TABLE “COMPANIES”;-- LTD - A classic! - [[NAME AVAILABLE ON REQUEST FROM COMPANIES HOUSE] overview - Find and update company information - GOV.UK](https://find-and-update.company-information.service.gov.uk/company/10542519)  
11678385 - BETTS & AMP; TWINE LTD - HTML entities - the name as you receive it via the API actually has no space between the & and the “AMP;” but (a) you can’t type that straight in here as the forum converts to a single “&” and (b) looks ok on the CH site (so - as mentioned before / above - CH may not have this right) - [BETTS & TWINE LTD overview - Find and update company information - GOV.UK](https://find-and-update.company-information.service.gov.uk/company/11678385)  
08804157 - SAFDASD & SFSAF ' SFDAASF" LTD - Backslashes and quotes - [SAFDASD & SFSAF \' SFDAASF\" LTD overview - Find and update company information - GOV.UK](https://find-and-update.company-information.service.gov.uk/company/08804157)

A good collection appear in this thread:  
[https://forum.aws.chdev.org/t/company-name-reg-ex-pattern/2072](https://forum.aws.chdev.org/t/company-name-reg-ex-pattern/2072)

---

_[View the full topic](http://forum.companieshouse.gov.uk/t/cross-site-scripting-xss-software-attack/3355)._