Lemmy has an XSS vulnerability in the Markdown parsersh.itjust.works 7 pointshardcopy3 years ago2 commentsSaveHideCopy link On HNComments−xyst3yWhat a blunder.I think even the worst static code analyzers would have caught this.Looking at the code that was injected by an attacker it seems like they were trying to extract user sessions and exfiltrate it.https://programming.dev/post/532566−urda3yI found myself asking the same thing: https://news.ycombinator.com/item?id=36662195
Comments
What a blunder.
I think even the worst static code analyzers would have caught this.
Looking at the code that was injected by an attacker it seems like they were trying to extract user sessions and exfiltrate it.
https://programming.dev/post/532566
I found myself asking the same thing: https://news.ycombinator.com/item?id=36662195