3 ms·
> As a web developper, this is the kind of exploits I keep in the back of my mind every time I develop something. As a web developer, you should also know that
by jdmichal 10y ago
> As a web developper, this is the kind of exploits I keep in the back of my mind every time I develop something.
As a web developer, you should also know that there is absolutely nothing you can do to prevent attacks performed through the developer console. This is the moral equivalent.
- Raphmedia 10y agoAt that point, yes, it's too late. The issue here is that their developer console is also the chat and that users can receive external messages from anyone in that "console". If you want to have the chat be the console, you really need to make sure everything is safe.