Live data from Hacker News

That company whose name used to contain HTML script tags Ltd

find-and-update.company-information.service.gov.uk

31–40 of 164 posts

Re: That company whose name used to contain HTML script tags Ltd

#31
post #8

Relevant context: https://twitter.com/zofrex/status/1319286955314614275 Apparently the name used to be \"> LTD

New name is disappointing. The company should at least be renamed to:

    \"><SCRIPT SRC=MJT.XSS.HT></SCRIPT> LTD

Re: That company whose name used to contain HTML script tags Ltd

#33
post #15

Nice to see Bobby Tables is all grown up. Relevant discussion on the Companies House Developer Forum: https://forum.aws.chdev.org/t/cross-site-scripting-xss-softw...

Bobby Tables would be https://find-and-update.company-information.service.gov.uk/c...

Not to be confused with the equally inspired https://find-and-update.company-information.service.gov.uk/c...

Re: That company whose name used to contain HTML script tags Ltd

#35
post #25
post #18

On a related topic, the name of the company I work for starts with a colon. The rest of the name is a common adjective. As you can imagine, it is virtually ungooglable at the moment. Any thoughts on how to get around this?

And I thought Yahoo! (with exclamation mark) had it rough.

At least they're a little better than a hypothetical -"Yahoo" which would return no results for your company at all...

Re: That company whose name used to contain HTML script tags Ltd

#36
post #6
post #5

Would be it interesting to know why the name had to be changed?

Because there are a bunch of companies which do aggregation of information about companies, and not all of them used parameterized SQL queries :-/

Not even all SQL engines support quoting all types of values. BigQuery, looking at you.

Re: That company whose name used to contain HTML script tags Ltd

#37

Earlier quoted context omitted.

And who's problem is that?

On a "what's reasonable" level, or on a "gets you called in by a minister or MP to be yelled at" level?

Solidarity to all of the folks who have had to work with elected officials. I got ripped a new one because I recommended we disable a PHP project in the mid-2000s because a hay bale reporting app (report counts of bay hales on farms) due to an RCE bug. Within a few hours of the app being disabled there was drama from a politician who got a phone call from a prominent farmer...

Re: That company whose name used to contain HTML script tags Ltd

#40

This is not a prank, its the new Companies house search which still contains some kinks and I assume they had to work around a very specific one here.

My understanding is that the Companies House search is fine, but various third-party consumers of the list might not be.

Here's an internet archive of the old name on one of those https://web.archive.org/web/20201022184617/https://suite.end...
Post reply on HN