News for hackers. Stuff that matters.

A comment on I have written a basic chat application using node.js, what do you guys think?.

Re:I have written a basic chat application using node.js, wh... by bpfh on Saturday December 24, 2011 @06:25PM (#3389996)
Seems fairly usable atm. A few observations: there is an XSS vulnerability as you probably learned by now. Also, there was a moment when someone was submitting content and it appeared under my nick "bpfh".

Other than that, kudos for a simple well-functioning chat.

[ Parent | on HN ]
Re:I have written a basic chat application using node.js, wh... by serkanyersen on Saturday December 24, 2011 @06:36PM (#3390008)
Thanks. Those two security issues are fixed now. It was nice chatting with you :)
[ Parent | on HN ]
Re:I have written a basic chat application using node.js, wh... by JamesBlair on Saturday December 24, 2011 @09:42PM (#3390294)
> > Also, there was a moment when someone was submitting content and it appeared under my nick "bpfh".

> Thanks. Those two security issues are fixed now.

You fixed one way of nickname duplication, but so long as you allow arbitrary utf-8 strings, there are all sorts of non-printing characters to use. You should really get a list of everything to filter. I don't have any experience with node.js, so I don't know if anyone has written a library that does it.

[ Parent | on HN ]