XSS attempt Submitted by nitori on July 19, 2023 at 6:23 AM in test ![" onload="console.log('Im in your mainframe :3')"](/apple-touch-icon-precomposed.png) turns into 4 comments 3
nitori OP wrote on July 19, 2023 at 6:23 AM (edited on July 19, 2023 at 6:23 AM) #16,262 ebic fail again, good HTML sanitizing 2
nitori OP wrote on July 21, 2023 at 10:04 AM #16,321 Hmm let's try adding a span into a link [<span onload="console.log('Im in your mainframe :3')"></span>](/) turns into <span onload="console.log('Im in your mainframe :3')"></span> 1
nitori OP wrote on July 21, 2023 at 10:29 AM #16,322 Replying to nitori (#16,321) bold? [<b onclick="console.log('Im in your mainframe :3')">I should not appear as bold</span>](/) turns into <b onclick="console.log('Im in your mainframe :3')">I should not appear as bold</span> 1
nitori OP wrote on July 21, 2023 at 10:30 AM #16,323 Replying to nitori (#16,322) cool, no arbitrary element addition 1
nitori OP wrote (edited )
ebic fail
again, good HTML sanitizing