Should one worry when a Views exposed filter autocompletes a function for certain words?
- Type
fbn
on the exposed filter field for Users. This is an autocomplete field.
RESULT: The autocomplete list offers two options starting withfunction(..)
. See image. - Choose the first option,
function (E, F) ...
RESULT: The wordfilter
is filled in. - Type again
fbn
in the field, then choose the secons option,function (B, C) ...
RESULT: The wordindexOf
is entered.
Inspecting the elements doesn't work very well, as soon as the focus leaves the field the autocomplete vanishes. I'll try some more with a network sniffer or Firefox instead of WebKit, maybe I'll have more luck.
This could be an XSS injection attempt. Should I worry?