XSStrike: XSS detection suite
github.com
XSStrike: XSS detection suite
1–10 of 36 posts
Re: XSStrike: XSS detection suite
#2ddd
Re: XSStrike: XSS detection suite
#3Spelling error on the very first image example: "Cofidence"
Re: XSStrike: XSS detection suite
#4Spelling error on the very first image example: "Cofidence"
I submitted a PR to fix the mistake before I read the comment here.
Re: XSStrike: XSS detection suite
#5Spelling error on the very first image example: "Cofidence"
This is so typically HN. What about the main aspects of this submission? Is it really the most advanced? Is it useful? What are your thoughts on its approach, coding style, effectiveness in certain situations etc.
“Found a spelling mistake, stopped looking at it, came here to report spelling mistake.”
Re: XSStrike: XSS detection suite
#6Spelling error on the very first image example: "Cofidence"
This is so typically HN. What about the main aspects of this submission? Is it really the most advanced? Is it useful? What are your thoughts on its approach, coding style, effectiveness in certain situations etc. “Found a spelling mistake, stopped looking at it, came here to report spelling mistake.”
But can you really trust someone who misspels?
Re: XSStrike: XSS detection suite
#7Earlier quoted context omitted.
This is so typically HN. What about the main aspects of this submission? Is it really the most advanced? Is it useful? What are your thoughts on its approach, coding style, effectiveness in certain situations etc. “Found a spelling mistake, stopped looking at it, came here to report spelling mistake.”
But can you really trust someone who misspels?
In this case the tool uses Levenshtein distances so should be fine.
Re: XSStrike: XSS detection suite
#8Earlier quoted context omitted.
This is so typically HN. What about the main aspects of this submission? Is it really the most advanced? Is it useful? What are your thoughts on its approach, coding style, effectiveness in certain situations etc. “Found a spelling mistake, stopped looking at it, came here to report spelling mistake.”
But can you really trust someone who misspels?
Since this is such a contentious topic let’s explicitly tag it as /s ;)
Ps: Thanks for your contributions to Raku!
Re: XSStrike: XSS detection suite
#9Spelling error on the very first image example: "Cofidence"
This is so typically HN. What about the main aspects of this submission? Is it really the most advanced? Is it useful? What are your thoughts on its approach, coding style, effectiveness in certain situations etc. “Found a spelling mistake, stopped looking at it, came here to report spelling mistake.”
What makes you think the parent stopped looking at the submission at that point? They're simply reporting a spelling mistake. There's no reason to attack them for that.
Re: XSStrike: XSS detection suite
#10Having used XSSStrike, I must say it probably is the best public tool for hunting XSS.