4 ms·
http://home.ronsor.gq:12321/cgi-bin/irc.html http://home.ronsor.gq:12321/cgi-bin/irc.html <script type="text/javascript">alert('you guys better watch out for
by pavement 11y ago
http://home.ronsor.gq:12321/cgi-bin/irc.html http://home.ronsor.gq:12321/cgi-bin/irc.html
<script type="text/javascript">alert('you guys better watch out for dat XSS and XSRF bidness');</script>
Oh god, this shit is sooooo not secure.
- zepolen 11y agowell you're missing a </xmp> to get it working
- isKill 11y agoWhoops, somehow IRC is kill.
- synchronise 11y agoThey should have prevented special characters from being entered at the server level. Not a lot you can do with just the latin alphabet, numerals and a space.
- dang 11y agoThis comment breaks the Show HN guidelines: Be respectful. Anyone sharing work is making a contribution, however modest. Instead of "you're doing it wrong", suggest alternatives. When someone is learning, help them learn more. https://news.ycombinator.com/showhn.html https://news.ycombinator.com/showhn.html