I created an ephemeral group chat app for strangers
commonroom.chat
I created an ephemeral group chat app for strangers
1–10 of 39 posts
Re: I created an ephemeral group chat app for strangers
#2[deleted]
Re: I created an ephemeral group chat app for strangers
#3Neat little project, but you can pass HTML tags directly into the chat! doesn't seem to run, but can load from external sites. Be careful!
Re: I created an ephemeral group chat app for strangers
#4Site is susceptible to some kind of css attack. Too bad.
Re: I created an ephemeral group chat app for strangers
#5Site is susceptible to some kind of css attack. Too bad.
[deleted]
Re: I created an ephemeral group chat app for strangers
#6Neat little project, but you can pass HTML tags directly into the chat! doesn't seem to run, but can load from external sites. Be careful!
How can I fix this? this is my first full stack app I've built and it's nice seeing users interact with the site
Re: I created an ephemeral group chat app for strangers
#7Site is susceptible to some kind of css attack. Too bad.
How can I fix this?
Re: I created an ephemeral group chat app for strangers
#8Neat little project, but you can pass HTML tags directly into the chat! doesn't seem to run, but can load from external sites. Be careful!
How can I fix this? this is my first full stack app I've built and it's nice seeing users interact with the site
https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Sc...
Edit: this focuses on script tags and other means to inject code, but most defenses also work for other injected tags
Re: I created an ephemeral group chat app for strangers
#9Re: I created an ephemeral group chat app for strangers
#10Earlier quoted context omitted.
How can I fix this?
You can try escaping HTML submitted from the form. Or even simply detecting the presence of any HTML tag and rejecting such submissiobs with a friendly error message.
ah yes! i will do this in the next version. someone recomended leaving some of the xss elements like the image and video function with the old school chat vibes but I'm not sure what to do lmaooo