Earlier quoted context omitted.
Sorry, would you mind explaining what this will do?
Improper input sanitation, you can potentially add raw html to other people's pages (XSS).
Doesn't the regex sanitize it before display?
A minimalistic site to vent and see others doing the same in realtime
121–130 of 148 posts
Re: A minimalistic site to vent and see others doing the same in realtime
#122This is great. It fills the same role as Twitter, but people's posts disappear after a few seconds, making it better than Twitter. I'm serious here. Twitter's a cesspool filled with people venting about random crap. So is Ventscape. We all need to vent sometimes, there's nothing inherently wrong with that. But the problem with Twitter is that it preserves and amplifies your venting until the end of time, which is the…
> This is great. It fills the same role as Twitter, but people's posts disappear after a few seconds, making it better than Twitter. Also like Jodel it is anonymous[1], which is a good thing whenever possible as has become obvious lately. [1]: wrt other users. Random nutjobs of all shapes cannot easily find you and nobody can verify if Jodel have really banned someone so they can to a larger degree do what they think…
> Threaten someone however and police will have your adress shortly.
Impugn someone who’s well lawyered-up, and your contact info may be demanded by a order pursuant to a lawsuit for defamation, yes?
Re: A minimalistic site to vent and see others doing the same in realtime
#123I can DDOS the space by posting large text frequently.
Re: A minimalistic site to vent and see others doing the same in realtime
#124Run this in console for continuous messages:
let i = 0; setInterval(() => { document.querySelector('.input-form__input').value = `Your message shown ${i} times...`; document.querySelector('.input-form__button').click(); i++; }, 20000);
Re: A minimalistic site to vent and see others doing the same in realtime
#125Re: A minimalistic site to vent and see others doing the same in realtime
#126Re: A minimalistic site to vent and see others doing the same in realtime
#127Many CORS errors on ff.
Re: A minimalistic site to vent and see others doing the same in realtime
#128Re: A minimalistic site to vent and see others doing the same in realtime
#129Earlier quoted context omitted.
Looks like it caps off at 2,000, and we're currently at 130K+ messages
what does this mean?
The API returns at most 2000 messages at a time (this might have changed since I last tried), and last I looked the message IDs were around 130K, meaning that's how messages there have been.
Re: A minimalistic site to vent and see others doing the same in realtime
#130Earlier quoted context omitted.
That's terrible. OP should take the site down and fix those issues.
Yeah, go ahead and down vote without explaining yourself. It's so educational!
My guess is that you were downvoted because you sound like you are talking about a very important system with a huge number of users that could have catastrophic consequences if the vulnerability is not fixed. It's just a project from a novice programmer having fun. Hence, no need to take the site down.