4 ms·
I played with it @ http://webshell.io/prototype/Njc5Z/7 http://webshell.io/prototype/Njc5Z/7 It seems to work. This uses a REST service I recently wrote in nod
by primaryobjects 14y ago
I played with it @ http://webshell.io/prototype/Njc5Z/7 http://webshell.io/prototype/Njc5Z/7
It seems to work. This uses a REST service I recently wrote in node.js + mongodb.
Edit:
14 people click the link and hit Run, but no one changes the text? Come on. I wrote a second little app to track this at http://webshell.io/prototype/Njc5Z/8 http://webshell.io/prototype/Njc5Z/8 just keep clicking Run to see it update, as people run the original app and hopefully enter their name or something.
- steeve 14y agoUpdated version to use arguments: http://webshell.io/prototype/Njc5Z/14 http://webshell.io/prototype/Njc5Z/14
- bunkat 14y agoYou may want to clean the input next time...
- primaryobjects 14y agoWow, 249 added. And a friendly mix of script injection, iframes, css, and image tags (had to disable the inline script tags because the redirects made people unable to see the data). Someone even changed the background image of the Webshell.IO interface itself. It might be a good idea for the webshell guys to add some basic xss protection, but otherwise, I think we've proven this is a neat idea.