Six security vulnerabilities from a year of HackerOne

Posted by nestlequ1k on Tuesday July 18, 2017 @11:46AM
from the flexport.engineering dept.

( 2 comments | 42 points | on HN )

Re:Six security vulnerabilities from a year of HackerOne by dmnd on Tuesday July 18, 2017 @12:26PM (#14797808)

Fun fact: dangerouslySetInnerHtml was almost going to be called insertXssVulnerabilityHere.

I wonder if vulnerability #2 from the post would still have happened if the name was that blatant.

[ Parent | on HN ]

Re:Six security vulnerabilities from a year of HackerOne by khana on Tuesday July 18, 2017 @12:27PM (#14797819)

That one about _blank hrefs - Good one! Thank you.

[ Parent | on HN ]