A minimalistic site to vent and see others doing the same in realtime

Re:A minimalistic site to vent and see others doing the same... by thepete2 on Wednesday January 27, 2021 @04:18AM (#25925977)

Improper input sanitation, you can potentially add raw html to other people's pages (XSS).

[ Parent | on HN ]

Re:A minimalistic site to vent and see others doing the same... by madhato on Wednesday January 27, 2021 @11:50AM (#25930439)

Doesn't the regex sanitize it before display?

[ Parent | on HN ]

Re:A minimalistic site to vent and see others doing the same... by some_random on Wednesday January 27, 2021 @01:53PM (#25932222)

Yes but it's pretty easily bypassed

[ Parent | on HN ]

Re:A minimalistic site to vent and see others doing the same... by Mapsmithy on Wednesday January 27, 2021 @09:08PM (#25937213)

I asked earlier because I'm genuinely curious, but do you have a payload that would bypass this particular regex?

[ Parent | on HN ]

Re:A minimalistic site to vent and see others doing the same... by madhato on Wednesday January 27, 2021 @06:49PM (#25935838)

How is it easily bypassed?

[ Parent | on HN ]