3 ms·
Human Queue: Chat Roulette Meets XSS Meets /dev/null
- deleted 16y ago[deleted]
- sandal 16y agoYeah, people have use that to do awesome things, including embedding http://marijnhaverbeke.nl/js1k/ http://marijnhaverbeke.nl/js1k/ Pretty much everything you can do in the browser, you can do through that tiny text box. But as soon as someone pops it, it's gone forever unless they put it back :)
- vyrotek 16y agoOops, didn't see your reply. I was having second thoughts about whether that was a good idea or not. Someone could do something... not so nice. Interesting experiment though!
- tesseract 16y agoLike what? Open a bunch of popup windows? Normally the problem with XSS is that it's a way of getting malicious code to execute in a privileged context (namely, a user's login session on a website they presumably care about and trust) but here no such privileged context exists.
- sandal 16y agoYeah, that makes XSS a 'feature' here. Though it is a bit scary to click a button that is going to shove completely unfiltered HTML into your browser that you can't inspect ahead of time :)
- sandal 16y agoYeah, there are all sorts of bad things that can happen with this, use this at your own risk. But it's entertaining, at least.