On: Public Chat Web Application Source Code on GitHub

[makepanic]

Including no input/output sanitization which leads to XSS issues.

[annnoo → makepanic]

I did something similar for a university project to show why input/output sanitization is so important. Very simple project (~100 lines iirc) but it did the job!

https://github.com/annnoo/websocket-chatxss

In my oppinion the most fun thing you can inject is the "Katamari"-Script: http://kathack.com/