News for hackers. Stuff that matters.

A comment on Ramarchy – a website anyone can edit.

Re:Ramarchy – a website anyone can edit by zuck9 on Saturday March 28, 2015 @02:33PM (#9282284)
Seems like someone who uses LastPass got XSRF'd: view-source:http://ramarchy.com/
[ Parent | on HN ]
Re:Ramarchy – a website anyone can edit by sejit on Saturday March 28, 2015 @04:04PM (#9282577)
The source has changed since your post. If I use LastPass and visited the site, should I be worried? What did the script do?
[ Parent | on HN ]
Re:Ramarchy – a website anyone can edit by tokenizerrr on Saturday March 28, 2015 @04:10PM (#9282600)
The script grabbed document.documentElement.innerHTML and resubmitted it as the new page contents. See my post above regarding CSRF.
[ Parent | on HN ]