3 ms·
Uhm, yeah it works but it's just a barebones chat using socket.io or am I missing something here?
by dvcrn 8y ago
Uhm, yeah it works but it's just a barebones chat using socket.io or am I missing something here?
- makepanic 8y agoIncluding no input/output sanitization which leads to XSS issues.
- annnoo 8y agoI did something similar for a university project to show why input/output sanitization is so important. Very simple project (~100 lines iirc) but it did the job! https://github.com/annnoo/websocket-chatxss https://github.com/annnoo/websocket-chatxss In my oppinion the most fun thing you can inject is the "Katamari"-Script: http://kathack.com/ http://kathack.com/