On my drupal installation, I use the standard db logging and search modules.
I've been looking at the log (using /admin/reports/dblog) and found some weird search events. I wouldn't be worried much about the searches themselves, but apparently the extensive search term broke the log display. I'm currently not sure if this could be exploited.

An excerpt from the log's HTML code with questionable searches is attached. As you can see, the log HTML code is broken.

CommentFileSizeAuthor
dblog.txt2.21 KBAnonymous (not verified)

Comments

jacob.embree’s picture

Category: Bug report » Support request
Issue summary: View changes
Status: Active » Closed (works as designed)

The output is escaped, so you shouldn't have a problem.