4 ms·
JavaScript in the body of the message box executes 0.o very cool none-the-less.
by johnernaut 13y ago
JavaScript in the body of the message box executes 0.o very cool none-the-less.
- anonfunction 13y agoOnly for you, it gets filtered before going over the wire. Have fun :)
- octatone2 13y agoShould still be sanitizing user input, there's no reason to be passing the message as an html variable in handlebars {{{message}}} :/ You trust your server-side sanitization that much?