Hacker News new | past | comments | ask | show | jobs | submit login

Nobody else has pointed this out (!): whatever platform is running at this URL doesn't sanitize input.

Notice how the C #includes seem to be including emptiness. Well, <stdio.h> et al weren't stripped; they're still in the source code, un-converted < > (ie NOT converted to &lt; &gt;) and all.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: