News for hackers. Stuff that matters.
Re:Gitlab servers are being exploited in DDoS attacks by mxrlkn on Thursday November 04, 2021 @10:21PM (#29114781)
I was once tasked with creating a new frontend on an old project that had an API endpoint return something like this:

  var array = ["foo", "bar"]
I was expecting xml or json (like the rest of the endpoints), but I realized that they just served this as text, and then eval'd it on the frontend...
Re:Gitlab servers are being exploited in DDoS attacks by david2ndaccount on Thursday November 04, 2021 @10:48PM (#29114940)
This was how you used to do it before JSON.parse was built into the browser.
Re:Gitlab servers are being exploited in DDoS attacks by zmmmmm on Thursday November 04, 2021 @11:11PM (#29115040)
it was literally a pseudo "standard":

https://en.wikipedia.org/wiki/JSONP

Re:Gitlab servers are being exploited in DDoS attacks by mxrlkn on Thursday November 04, 2021 @11:57PM (#29115277)
Right, but for it to be JSONP, the response should be injected into a script tag, I believe.
Re:Gitlab servers are being exploited in DDoS attacks by tentacleuno on Friday November 05, 2021 @03:38AM (#29116386)
And it should be wrapped in a function call (most times, you can choose which function is called by a query parameter).