search

entomb / dragonchan

A prototype script to transform any /b/ thread into a dragon slaying match.
24 stars 17 forks source link

cross-site scripting vulnerability #37

Open kevinchess opened 10 years ago

kevinchess commented 10 years ago

when someone quotes the new hero on 4chan, they can post html, for example

and it appears on the webpage http://dragonslayer.eu01.aws.af.cm/[thread id]

kevinchess commented 10 years ago

example: script