News for hackers. Stuff that matters.

A comment on Yahoo admits mangling e-mail (2002).

Re:Yahoo admits mangling e-mail (2002) by yvoschaap on Saturday July 02, 2022 @01:21PM (#31960770)
I remember sending fake Yahoo login forms as html attachments. eval() & alert() fix:

`const ev = 'ev', al = 'al', ert = 'ert'; window[ev + al](window[al + ert]('hi'))`

[ Parent | on HN ]
Re:Yahoo admits mangling e-mail (2002) by ghayes on Saturday July 02, 2022 @09:06PM (#31964085)
Curious if `evevalal` would have worked…
[ Parent | on HN ]
Re:Yahoo admits mangling e-mail (2002) by lalopalota on Saturday July 02, 2022 @09:44PM (#31964295)
"evreviewal" probably not
[ Parent | on HN ]
Re:Yahoo admits mangling e-mail (2002) by londons_explore on Saturday July 02, 2022 @06:10PM (#31962898)
block the word 'window' and I don't think your approach is possible?
[ Parent | on HN ]
Re:Yahoo admits mangling e-mail (2002) by Matheus28 on Saturday July 02, 2022 @11:50PM (#31964887)
You don't even need letters to achieve turing completeness in js: http://www.jsfuck.com/
[ Parent | on HN ]
Re:Yahoo admits mangling e-mail (2002) by kragen on Saturday July 02, 2022 @06:55PM (#31963239)
Just use 'this'.
[ Parent | on HN ]