Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
jowlo
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
by
jowlo
5y ago
> You forgot to read the sentence before that Oh, yes, I did, sorry! I thought this was found in production code. I do support them publishing this and like I said: The code is audited to find exactly these kinds of errors, so I am not a
2.
▲
by
jowlo
5y ago
So, the audit found (among other minor things) a pretty standard XSS vulnerability (on page 7) and lots of usages of `.innerHTML` which has been considered an insecure coding practice for eons. While errors always happen and it is a good th