security issue?

[dps1]

In my search logs, I have a few instances of users attempting to execute what looks like a remote javascript file.

e.g.

<script src=http usuc.us j.php>jonny< script>

Is this something we should be concerned about?

Guess this isn't a javascript, but a php. But, same sort of question. Is it possible to conduct a search and attempt to execute server-side functions like asp or php in such a manner?

[David]

No need to be concerned. We are aware of people trying simple tricks like this. The input string is never executed and the HTML output is encoded to look like this,
....j.php&gt;jonny&lt; script&gt;......
Which prevent browsers treating the string like code.

There are no security issues in V4.2 and V5 Beta that we are aware of at the moment.