3 ms·
Ok removed that. Privacy policy? Oh hi, I got yo pastes. EDIT: Yep, you can inject JS too. Apologies for the way I posted that, did make sure there was nothin
by Mandatum 12y ago
Ok removed that.
Privacy policy? Oh hi, I got yo pastes.
EDIT: Yep, you can inject JS too. Apologies for the way I posted that, did make sure there was nothing personal on there (was mostly test data and people copy-pasting Wiki stuff).
- voltagex_ 12y agoJust a warning - that page is ~7MB and crashed Firefox for me. Still pretty sad the browser can be halted via zerg rush.
- Mandatum 12y agoYeah it goes on to list all pastes on the site and gives you the ability to edit, destroy or view them.
- heynk 12y agoYeah, this was a very quick project and that slipped through. All fixed now. If people are interested I'd be happy to put due diligence in and put up a privacy policy! Edit: maybe I'm an idiot and can't repro the js injection, could you link me? http://copypastecsv.herokuapp.com/pastes/8279b342 http://copypastecsv.herokuapp.com/pastes/8279b342
- dyscrete 12y agoI was about to mention the bad security of uploading personal documents to some guy's Heroku instance. Instead found this a very unprofessional and destructive way to handle a bug report, and possibly illegal[1]. The site's creator Hank Stoever has his public contact information available[2]. [1] http://www.huffingtonpost.com/2012/09/13/barrett-brown-arrested-fo_n_1881535.html http://www.huffingtonpost.com/2012/09/13/barrett-brown-arres... [2] http://hankstoever.com http://hankstoever.com EDIT: removed text wall and typos