News for hackers. Stuff that matters.

A comment on The XSS Game by Google.

Re:The XSS Game by Google by freecodyx on Wednesday November 23, 2016 @11:36AM (#13023734)
I just call alert('dada') from the console, and it tells me congratulation the site is buggy as well
[ Parent | on HN ]
Re:The XSS Game by Google by Buge on Wednesday November 23, 2016 @11:43AM (#13023791)
The victim of your XSS attack will not use the console, so when creating a XSS attack it shouldn't require the use of the console to activate it.

I can break any website for myself by putting stuff in the console.

[ Parent | on HN ]
Re:The XSS Game by Google by NullCharacter on Wednesday November 23, 2016 @08:51PM (#13027366)
Kinda not within the spirit of the exercise don't you think.
[ Parent | on HN ]