4chan-x icon indicating copy to clipboard operation
4chan-x copied to clipboard

Published 20 hours ago • verified publisher icon ihavenoface

Javascript from archives

Open ccd0 opened this issue 10 years ago • 0 comments

The way posts are retrieved from the archives allows a malicious archive to inject Javascript into the page through the name, subject, and various other fields. Fortunately this is much less scary with #341 fixed.

ccd0 avatar Oct 11 '14 19:10 ccd0