3 ms·
> It all started when Chrome implemented popovers in HTML [...] we found some pretty cool vectors that allow you to exploit hidden inputs and meta tags So if t
by cantSpellSober 3y ago
> It all started when Chrome implemented popovers in HTML [...] we found some pretty cool vectors that allow you to exploit hidden inputs and meta tags
So if these vectors/sploits were patched out, the game wouldn't work anymore?
(Impressive, thanks for sharing!)
- couchand 3y agoI'm not sure I agree that there's any exploit here. The crux of the claim seems to be that JavaScript code in an onbeforetoggle attribute is "unlikely to be filtered by a WAF". In any case, this game doesn't involve any of that, it just uses popovers as fancy internal links.
- forgotpwd16 3y agoExploit in this case simply means making use of something rather a security vuln.