News for hackers. Stuff that matters.

A comment on Looking at how many sites use vulnerable JavaScript libraries. Parent comment

Re:Looking at how many sites use vulnerable JavaScript libra... by wrinkl3 on Wednesday November 22, 2017 @03:24PM (#15760270)
Vulnerabilities don't have to affect the backend - most of JQuery-related CVEs that I could find had to do with XSS.
[ Parent | on HN ]
Re:Looking at how many sites use vulnerable JavaScript libra... by merb on Wednesday November 22, 2017 @05:39PM (#15761314)
which can only happen if you pass wrong data from the backend to the jquery related function. I.e. dynamically generate input for $()...
[ Parent | on HN ]
Re:Looking at how many sites use vulnerable JavaScript libra... by PetahNZ on Wednesday November 22, 2017 @06:26PM (#15761591)
Well not really backend exclusive: `$('#foo').append('Showing search results for ' + (new URL(location)).searchParams.search);`
[ Parent | on HN ]