3 ms·
End-users aren't who you need to tell. Just site owners. Posting this to HN before it was fixed constitutes (IMO) completely irresponsible disclosure.
by durin42 16y ago
End-users aren't who you need to tell. Just site owners. Posting this to HN before it was fixed constitutes (IMO) completely irresponsible disclosure.
- mike-cardwell 16y agoI agree. I would not have disclosed this particular XSS flaw until after it was fixed.