Re:WebSocket whiteboard with chat
by yahelc on Monday February 21, 2011 @02:06PM
(#2246681)
Wow, so, I might have shut down the whole room by typing in the chat <script>window.close();</script> That room is a giant XSS disaster waiting to happen.
[ Parent
| on HN ]
Yes, you did. I wouldn't recommend going to the site on your own machine because of the security hole. They should fix this as soon as possible.
Re:WebSocket whiteboard with chat
by bcardarella on Monday February 21, 2011 @02:36PM
(#2246809)
Yeah, I fixed that. It was just a weekend hack. I think the Goatse guy forced my hand
Thanks for fixing it, and sorry about the window.close() thing :P Very cool; its mind-blowing how simple the code is. Can you post some of the server-side code?
Re:WebSocket whiteboard with chat
by bcardarella on Monday February 21, 2011 @04:56PM
(#2247399)
Don't worry about it. It was pretty funny.
I'm going to probably release a NodeJS/Socket.IO version then do a blog post comparing the two and release all of the source code. Should have the Node one up in a day or two.
Re:WebSocket whiteboard with chat
by kylemathews on Monday February 21, 2011 @02:28PM
(#2246772)
You did, it closes now almost immediately after opening.