3 ms·
Oh wow. Would love to know you did that. :-o
by malcolmhere 11y ago
Oh wow. Would love to know you did that. :-o
- Chris_Newton 11y agoI feel like I’m posting a spoiler here, but... Think what happens if the user’s “e-mail address” happens to start with: "/><script>
- TACIXAT 11y agoJust put a script in the username field, sorry if that wasn't clear. <script>alert(0)</script> All the live updating that module does, I figured there might be some code injection.