Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on A real case of Bobby Tables?. Parent comment
It allows : / . < > and " though which is enough to allow XSS.
Strangely, though, they don't allow lower case letters.
And yes, you can register a company named > LIMITED and someone has https://find-and-update.company-information.service.gov.uk/c...
It allows : / . < > and " though which is enough to allow XSS.
Strangely, though, they don't allow lower case letters.
And yes, you can register a company named > LIMITED and someone has https://find-and-update.company-information.service.gov.uk/c...