News for hackers. Stuff that matters.

A comment on Open Source Chat Server in Node.js with dynamic rooms.

Re:Open Source Chat Server in Node.js with dynamic rooms by projectmeshnet on Monday May 28, 2012 @12:22AM (#4031920)
XSS Vulnerable. USE AT YOUR OWN RISK
[ Parent | on HN ]
Re:Open Source Chat Server in Node.js with dynamic rooms by tferris on Monday May 28, 2012 @01:04AM (#4032024)
Please explain
[ Parent | on HN ]
Re:Open Source Chat Server in Node.js with dynamic rooms by projectmeshnet on Monday May 28, 2012 @01:30AM (#4032090)
https://github.com/lakkadshah/SImple-Chat-Server/issues/1

<IMG """><SCRIPT>alert("XSS")</SCRIPT>">

[ Parent | on HN ]
Re:Open Source Chat Server in Node.js with dynamic rooms by sixcorners on Monday May 28, 2012 @01:30AM (#4032092)
When you set your name you can include arbitrary HTML it seems.

It's hard to tell.. Not sure if I am just running javascript on my machine.. It's very laggy.

Edit: Looks like it is fixed now.

[ Parent | on HN ]