News for hackers. Stuff that matters.

A comment on Age: A simple, modern and secure file encryption tool. Parent comment

Re:Age: A simple, modern and secure file encryption tool by AgentME on Saturday December 28, 2019 @06:26PM (#21902560)
Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues. Avoiding XSS is doable; with most web frameworks you're protected from XSS by default and have to specifically turn off the safeties to get XSS.
[ Parent | on HN ]
Re:Age: A simple, modern and secure file encryption tool by dependenttypes on Saturday December 28, 2019 @08:47PM (#21903270)
> Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues

Such as signal! https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec...

[ Parent | on HN ]