Re:Show HN: Non.io, a Reddit-like platform Ive been working ...
by chrisshroba on Tuesday June 13, 2023 @08:05AM
(#36309008)
When I load the all page, I get an alert that just says "1", which feels like it's probably a successful XSS attack. Given that, I can't justify putting my credit card number directly into the site. If it took Paypal, Apple Pay, or similar I would absolutely give it a try for a few months.
Screenshot of the alert (imgur marked it as nsfw because it includes a thumbnail of a post that is mildly nsfw): https://imgur.com/a/TmwO1jg
Screenshot of the alert (imgur marked it as nsfw because it includes a thumbnail of a post that is mildly nsfw): https://imgur.com/a/TmwO1jg
The likely culprit: https://imgur.com/a/rJrLxfn