4 ms·
Here's a question, could such an exploit be achieved using something like Stack Overflow?
by martin-adams 10y ago
Here's a question, could such an exploit be achieved using something like Stack Overflow?
- jazoom 10y agoGood question. How much markup do they allow?
- dspillett 10y agoProbably not due to the limited markup options available. It would almost certainly be possible form a great many similar forums and bulletin-board like sites though.
- Klathmon 10y agoCould you get away with a more limited version by abusing Unicode? With so many "unprintables" combined with things like the RTL and LTR control characters I think it would be possible on some level.
- marcinkuzminski 10y agoDepends on the markup extensions, but other websites that allows embedded notes could be also a attack vector.
- deleted 10y ago[deleted]
- beejiu 10y agoYes. If you have multiline code, you can just add whitespace to the first line and it will appear outside of the code element. At least OS X, you cannot see a scroll bar.