Re:Gitlab servers are being exploited in DDoS attacks
by mxrlkn on Thursday November 04, 2021 @10:21PM
(#29114781)
I was once tasked with creating a new frontend on an old project that had an API endpoint return something like this:
I was expecting xml or json (like the rest of the endpoints), but I realized that they just served this as text, and then eval'd it on the frontend...
[ Parent
| on HN ]
Re:Gitlab servers are being exploited in DDoS attacks
by david2ndaccount on Thursday November 04, 2021 @10:48PM
(#29114940)
This was how you used to do it before JSON.parse was built into the browser.
Re:Gitlab servers are being exploited in DDoS attacks
by zmmmmm on Thursday November 04, 2021 @11:11PM
(#29115040)
it was literally a pseudo "standard":
Re:Gitlab servers are being exploited in DDoS attacks
by mxrlkn on Thursday November 04, 2021 @11:57PM
(#29115277)
Right, but for it to be JSONP, the response should be injected into a script tag, I believe.
Re:Gitlab servers are being exploited in DDoS attacks
by tentacleuno on Friday November 05, 2021 @03:38AM
(#29116386)
And it should be wrapped in a function call (most times, you can choose which function is called by a query parameter).