4 ms·
PS. You should escape the chat messages. I was able to inject javascript.
by haberdasher 12y ago
PS. You should escape the chat messages. I was able to inject javascript.
- chbrown 12y agoCould be part of the game. Bughouse = chess + chess, inb.tw = chess + XSS.
- haberdasher 12y agoJust to be clear, inb.tw has no XSS issues, retichess does.