The <script>alert(“XSS”)</script>

Posted by sotrue5 on Sunday February 12, 2023 @01:35AM
from the self-post dept.

testing https://news.ycombinator.com/item?id=34759951

( 6 comments | on HN )

Re:The <script>alert(“XSS”)</script> by WantonQuantum on Sunday February 12, 2023 @01:37AM (#34760489)

I'd be surprised if HN were vulnerable to XSS attacks.

[ Parent | on HN ]

Re:The <script>alert(“XSS”)</script> by sotrue5 on Sunday February 12, 2023 @01:38AM (#34760497)

[ Parent | on HN ]

Re:The <script>alert(“XSS”)</script> by sotrue5 on Sunday February 12, 2023 @01:37AM (#34760491)

sorry for spam @dang

[ Parent | on HN ]

Re:The <script>alert(“XSS”)</script> by sotrue5 on Sunday February 12, 2023 @01:35AM (#34760481)

test comment

[ Parent | on HN ]

Re:The <script>alert(“XSS”)</script> by josephcsible on Sunday February 12, 2023 @01:49AM (#34760545)

This is bad. I think the only reason it didn't work here is that you used smart quotes instead of straight quotes.

Edit: It's completely fixed now.

[ Parent | on HN ]

Re:The <script>alert(“XSS”)</script> by thekingshorses on Sunday February 12, 2023 @11:30AM (#34764102)

Seems like it is fixed in a weird way.

<marquee>alert("XSS")</marquee>

[ Parent | on HN ]