News for hackers. Stuff that matters.

A comment on Stacksort – Searches StackOverflow for sorting functions and runs them (2013). Parent comment

Re:Stacksort – Searches StackOverflow for sorting functions ... by Uehreka on Monday November 05, 2018 @11:28AM (#18383590)
Given that this site is not hosted on a domain where you have important session cookies (or where you’ve granted permissions like camera or location usage) I don’t see much problem with eval-ing untrusted code. Most of the common XSS threats just don’t apply here.
[ Parent | on HN ]
Re:Stacksort – Searches StackOverflow for sorting functions ... by astrodust on Monday November 05, 2018 @12:29PM (#18384115)
It's all fun and games until the next JavaScript sandbox busting zero day drops.
[ Parent | on HN ]
Re:Stacksort – Searches StackOverflow for sorting functions ... by kpcyrd on Monday November 05, 2018 @12:54PM (#18384339)
If I had that kind of exploit I surely wouldn't post it on stackoverflow.
[ Parent | on HN ]
Re:Stacksort – Searches StackOverflow for sorting functions ... by jsmith99 on Monday November 05, 2018 @03:28PM (#18385646)
Why not? They even have a tag for it

https://stackoverflow.com/questions/tagged/exploit

[ Parent | on HN ]
Re:Stacksort – Searches StackOverflow for sorting functions ... by crystaln on Monday November 05, 2018 @06:40PM (#18387010)
Maybe someone should create a site like this that runs all security exploits on SO in your browser.
[ Parent | on HN ]