3 ms·
Like what? Open a bunch of popup windows? Normally the problem with XSS is that it's a way of getting malicious code to execute in a privileged context (namely,
by tesseract 16y ago
Like what? Open a bunch of popup windows? Normally the problem with XSS is that it's a way of getting malicious code to execute in a privileged context (namely, a user's login session on a website they presumably care about and trust) but here no such privileged context exists.
- sandal 16y agoYeah, that makes XSS a 'feature' here. Though it is a bit scary to click a button that is going to shove completely unfiltered HTML into your browser that you can't inspect ahead of time :)