XSS issue affecting every page on TheDailyWTF

Posted by sikhbeats on Sunday June 15, 2014 @04:28AM
from the self-post dept.

e.g. http://thedailywtf.com/Articles/

Every page is playing an annoying sound, embedded in a comment appearing in the side bar [1]. It looks like they were able to fix the issue in the forum [2], but thedailywtf.com itself is still suffering from the issue.

[1] http://i.imgur.com/0YviIOJ.png

[2] http://what.thedailywtf.com/t/how-about-this-audio-src-http-soundjax-com-reddo-64951-5ecddyhorn-mp3-controls-autoplay-audio/889/23

( 2 comments | 9 points | on HN )

Re:XSS issue affecting every page on TheDailyWTF by sikhbeats on Sunday June 15, 2014 @12:22PM (#7895563)

(update) Sunday 16:20 UTC: looks like they fixed it. Though it's not entirely clear if the thread got pushed out of the front page and the bug still remains.

[ Parent | on HN ]

Re:XSS issue affecting every page on TheDailyWTF by ExpiredLink on Sunday June 15, 2014 @06:43AM (#7894966)

Funny!

[ Parent | on HN ]