Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Google's XSS game. Parent comment
The real problem is the substring(1) function which passes the "num", instead of making sure the length is 1 it is allowing everything.
There are no comments on this comment yet.
The real problem is the substring(1) function which passes the "num", instead of making sure the length is 1 it is allowing everything.