4 ms·
Are you saying that a link/form on a third-party site can create a submission? That sounds like an XSRF bug in HN.
by kevincox 4y ago
Are you saying that a link/form on a third-party site can create a submission? That sounds like an XSRF bug in HN.
- gnicholas 4y agoI'm 95% sure that was the case. I tried remembering/looking for the site that did it, but I was unsuccessful. The site had a number of very popular submissions, partly because people were inadvertently submitting the page every time they went to go look at the discussion on HN (so they thought). It's possible @dang shut down whatever method they were using. I assume that submissions count more than upvotes in the algorithm, so this would be deceptive/unfair. I'm not technical, but wouldn't it be the same as using the submission bookmarklet?
- kevincox 4y agoI don't know what bookmark you are talking about but I would expect that it just pre-fills the URL and title but would still expect it to require user interaction on HN afterwards.