Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This has serious XSS holes which need fixing! Here is a PR that should do the job (not tested): https://github.com/idoco/map-chat/pull/1


Looks like it's all fixed now :)


Yeah, I added some real XSS protection.

Before today, I thought it would be cool to enable some html :)


Yes, indeed the party is over. Going for beers now ;)


Thank you for your participation in my XSS hackathon experiment ;)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: