3 ms·
Oops, didn't see your reply. I was having second thoughts about whether that was a good idea or not. Someone could do something... not so nice. Interesting exp
by vyrotek 16y ago
Oops, didn't see your reply. I was having second thoughts about whether that was a good idea or not. Someone could do something... not so nice.
Interesting experiment though!
- tesseract 16y agoLike what? Open a bunch of popup windows? Normally the problem with XSS is that it's a way of getting malicious code to execute in a privileged context (namely, a user's login session on a website they presumably care about and trust) but here no such privileged context exists.
- sandal 16y agoYeah, that makes XSS a 'feature' here. Though it is a bit scary to click a button that is going to shove completely unfiltered HTML into your browser that you can't inspect ahead of time :)