I got a "You've been XSSd" popup. Not sure if humorous alert("test") or if demo ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		taneq on Feb 4, 2016 \| parent \| context \| favorite \| on: A collection of tweet-sized D3 creations – to add ... I got a "You've been XSSd" popup. Not sure if humorous alert("test") or if demo JS exploit... Edit: Some Ctrl+F resulted in "console.log("halp"); alert("you've been XSSd");" from "Harrison Shoebridge". Naff.

borkabrak on Feb 4, 2016 [–]

Without looking into the source, I'd bet someone tweeted the "exploit", just to make the point that going to that page basically runs arbitrary javascript in your browser.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact