News for hackers. Stuff that matters.

A comment on Ramarchy – a website anyone can edit. Parent comment

Re:Ramarchy – a website anyone can edit by sejit on Saturday March 28, 2015 @04:04PM (#9282577)
The source has changed since your post. If I use LastPass and visited the site, should I be worried? What did the script do?
[ Parent | on HN ]
Re:Ramarchy – a website anyone can edit by tokenizerrr on Saturday March 28, 2015 @04:10PM (#9282600)
The script grabbed document.documentElement.innerHTML and resubmitted it as the new page contents. See my post above regarding CSRF.
[ Parent | on HN ]