This thread is permanently archived
<script>alert("hi gurl");</script>
##Dev:Lain##
| The code is all open source. You can see everywhere we call Sanitize.clean and JSON.dump. https://github.com/dangeru/awoo/
| Why tf does this threads notification text not go away!?
| WHAT DID YOU DO!?
| wat
| Oh i don't know. I just checked for the most basic XSS, it seems input was not sanitized properly in the title
| >d
| What's wrong with this
##Dev:Lain##
| Even though the </script> is inside a string literal, the html parser just accepts it as the end of the script. I'll work on fixing it later
| jj
This thread is permanently archived
| <script>alert("hi gurl");</script>