Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on 1Password sends your password in clear text across the loopback interface.
https://gist.github.com/joevennix/438782cbe447e86f2506
It would be more interesting if an arbitrary website could do this, but they prevent that attack by checking the Origin header on the initial websocket request.
There are no comments on this comment yet.
https://gist.github.com/joevennix/438782cbe447e86f2506
It would be more interesting if an arbitrary website could do this, but they prevent that attack by checking the Origin header on the initial websocket request.