Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Contributors: Jasvir Nagra <img src=x onerror=alert()>

Nice try :)



I love that Jas (being on the Google security team) just instinctively XSS's any form he fills out, and I love that our code just leaves his tag there, properly escaped, for all to see.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: