Show HN: I built a self-hosted Basecamp alternative. Try the demo

Re:Show HN: I built a self-hosted Basecamp alternative. Try ... by zapt02 on Monday May 13, 2013 @05:06PM (#5701414)

XSS vulnerabilities all over the place. No validation performed at all? Example; http://www.duetapp.com/demo/#projects/3/tasks/30

[ Parent | on HN ]

Re:Show HN: I built a self-hosted Basecamp alternative. Try ... by 23andwalnut on Monday May 13, 2013 @06:18PM (#5701788)

Hmm. There is definitely a lots of validation on both the client and server. The demo refreshes every 30 mins so I'm not able to see what you're referring to. Can you shoot me an email with the issue you're referring to and I'll look into it asap. Thanks.

[ Parent | on HN ]

Re:Show HN: I built a self-hosted Basecamp alternative. Try ... by zapt02 on Tuesday May 14, 2013 @03:22PM (#5707387)

I added description to a task which looked like this: <script>alert('lol!');</script>

And it happily runs the script when you view that task.

[ Parent | on HN ]

Re:Show HN: I built a self-hosted Basecamp alternative. Try ... by Lhadatt on Monday May 13, 2013 @06:10PM (#5701734)

OP, if you can address this, I'll probably buy.

How are tax rates configured? I didn't see anything about it in the admin demo.

[ Parent | on HN ]

Re:Show HN: I built a self-hosted Basecamp alternative. Try ... by 23andwalnut on Monday May 13, 2013 @06:18PM (#5701790)

The tax rate is set in the config file.

[ Parent | on HN ]