News for hackers. Stuff that matters.

A comment on HTML5 Security Spreadsheet.

Re:HTML5 Security Spreadsheet by jqueryin on Friday March 28, 2014 @08:56AM (#7486867)
Anybody else find it hilarious that when you navigate to https://html5sec.org/ they have a series of 3 XSS alert() attack vectors at work?
[ Parent | on HN ]
Re:HTML5 Security Spreadsheet by patrikj on Friday March 28, 2014 @09:47AM (#7487170)
At first I thought it was intentionally done for demonstration purposes, but now I'm just confused about the site.
[ Parent | on HN ]
Re:HTML5 Security Spreadsheet by arcatek on Friday March 28, 2014 @09:55AM (#7487213)
The author is using rawgithub.com to serve javascript files, but it seems that they serve 'erroneous' files when used too much.

It's actually kinda funny, they even go up to redefine some Javascript variables such as Infinity[1].

[1] https://github.com/kitcambridge/evil.js/

[ Parent | on HN ]
Re:HTML5 Security Spreadsheet by oftenwrong on Friday March 28, 2014 @09:47AM (#7487171)
"This website abuses rawgithub.com. You should complain to its owner."
[ Parent | on HN ]