4 ms·

you got a xss bro https://aaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.com/a?áaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaaÂáaa

• JonathanMerklin 5y ago
  Thought I'd comment to note that (as of 2021-05-14T22:07:00Z) this just does the alert() POC and isn't nefarious, if anyone is deeply curious enough to click but cautious enough to avoid a deaddove.jpg situation
  • piemadd 5y ago
    Just fixed this a few minutes ago, thanks to those who told me about it! (look for v1.4.2 on npm and the corresponding commit on github)
• piemadd 5y ago
  doesn't work anymore >:) with the pure speed of replit i went from issue opened to closed in like 20 minutes
  • whoisburbansky 5y ago
    Wait could you explain a bit more how replit let you fix it so quickly
    • piemadd 5y ago
      Well, I use Replit as an ide and just hitting the run button meant my fix was immediately deployed. didn't have to push to git or wait ssh into a machine to pull from master and restart
      • whoisburbansky 5y ago
        Ahhh I didn’t realize replit let you deploy, that clears things up, thanks.