Show HN: Check if my startup ideas have legs

Re:Show HN: Check if my startup ideas have legs by daltonlp on Friday February 12, 2021 @08:24PM (#26120596)

Supporting HTML in the description makes XSS more likely:

https://provetheywantit.com/project?public_token=pub_KSUPBwl...

[ Parent | on HN ]

Re:Show HN: Check if my startup ideas have legs by repartix on Friday February 12, 2021 @09:46PM (#26120948)

Does XSS in the description hurt? There's nothing to steal from the /project page and it's not displayed in /admin.

[ Parent | on HN ]

Re:Show HN: Check if my startup ideas have legs by withinboredom on Saturday February 13, 2021 @03:40AM (#26122297)

Do you really want someone to inject some js that says "click here to receive notifications about this project" that actually sends them spam notifications?

[ Parent | on HN ]

Re:Show HN: Check if my startup ideas have legs by repartix on Saturday February 13, 2021 @11:05AM (#26124358)

Fixed, thanks! Also urls get hyperlinked now.

[ Parent | on HN ]