Looks great...I'll try you guys out for the site I'm building at the moment.
Ask HN: Review my startup, clickdesk.com
11–13 of 13 posts
Re: Ask HN: Review my startup, clickdesk.com
#12Your login form is susceptible to a trivial XSS attack. The content of the username field when posting an invalid username/password pair is embedded in the response and is not escaped at all.
You should get someone to take a serious look at the security of your site.
Re: Ask HN: Review my startup, clickdesk.com
#13Your login form is susceptible to a trivial XSS attack. The content of the username field when posting an invalid username/password pair is embedded in the response and is not escaped at all. You should get someone to take a serious look at the security of your site.
Thanks for letting us know - fixing it in a min now.