search

CWDG / web-calc

http://cwdg.github.io/web-calc/
0 stars 1 forks source link

It's vulnerable to XSS attacks #1

Open paultela opened 10 years ago

paultela commented 10 years ago

Due to the eval() for calculation we can execute arbitrary javascript. Pretty useful.

arcdigital commented 10 years ago

Excellent. I will do some tests on the usability of this and see how we can exploit it the most.

paultela commented 10 years ago

Keep us updated on your progress. The BBC won't know what hit them. :-)

Hardolaf commented 10 years ago

What sort of jokes should we play on them?

mikeletscher commented 10 years ago

Create 10,000 users

arcdigital commented 10 years ago

@mikeletscher that's no fun...we already did that

Hardolaf commented 10 years ago

@arcdigital Why only 10,000?

arcdigital commented 10 years ago

@Hardolaf got bored.

Hardolaf commented 10 years ago

@arcdigital So write a script to keep generating them until they run out of storage space?

arcdigital commented 10 years ago

@Hardolaf be my guest.

mikeletscher commented 10 years ago

mark would comment his demo nicely

paultela commented 8 years ago

Any progress on this? Been more than 2 years now

paultela commented 8 years ago

@arcdigital @btmills @tarebyte @mikeletscher Who can jump on this?

ecqfyavjjdksg

btmills commented 8 years ago

:+1:

btmills commented 8 years ago

This needs fixed.

mikeletscher commented 8 years ago

can someone add an urgent label

mikeletscher commented 2 years ago

Uh oh, looks like the site is offline. How will people calculate things now?

btmills commented 2 years ago

Yet somehow the status page is still showing all green.

Who has the pager this week?