News for hackers. Stuff that matters.

A comment on Another flaw in Signal desktop app leaks chats in plaintext. Parent comment

Re:Another flaw in Signal desktop app leaks chats in plaintext by jscissr on Friday May 18, 2018 @06:27AM (#17100257)
I think escaping quotes only matters for attributes (which can use ' or "). Example:

    <img src="$url">
Exploit:

    foo.jpg" onload="alert('pwned')
[ Parent | on HN ]
Re:Another flaw in Signal desktop app leaks chats in plaintext by kuroguro on Friday May 18, 2018 @09:05AM (#17101100)
Heh, found the exact bug on a live bbcode parser some 5 years ago.
[ Parent | on HN ]
Re:Another flaw in Signal desktop app leaks chats in plaintext by codedokode on Friday May 18, 2018 @05:45PM (#17105205)
It was probably written using regexps? One should make full syntax analysis instead of writing regexp hacks.
[ Parent | on HN ]