News for hackers. Stuff that matters.
Re:Google's XSS game by lazyjones on Thursday May 29, 2014 @10:57AM (#7816522)
JS does automatic type conversion in this case, so it's syntactically correct to multiply a string with a number (or function result). We're just interested in the side-effects of alert(), so it doesn't really matter what kind of expression we use it in, as long as it parses correctly and causes alert() to be executed (evaluated).
Re:Google's XSS game by mariocarvalho on Sunday June 01, 2014 @12:39PM (#7829772)
Nice!