Found an interesting bug, you can inject JS code ... give it a try on http://www... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

a_macgregor on June 4, 2012 | parent | context | favorite | on: Balloons.io: an awesome looking realtime chat on n...

Found an interesting bug, you can inject JS code ... give it a try on http://www.pssdbt.com:3000 demo

Just type <script>alert('JS Injection for the win');</script> on the chat box, it will execute for all members in the chat.

ricardorauch on June 13, 2012 [–]

We fixed it!

a_macgregor on June 19, 2012 | [–]

Awesome

Consider applying for YC's W25 batch! Applications are open till Nov 12.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact