11–20 of 39 posts
What chat I did get really recreated the 14 year old edgelords in chatrooms experience though. Lots of porn gif spamming
I couldn't figure out what my username was, I had to ask in the chat.
It's possible to embed recursive iframes, so I can see that being exploited for bad things.
Otherwise I like the idea. People in the chat were nice, but I can't help but think that soon chat rooms will be full of chatGPT bots and nobody will be any the wiser!
2 observations: I couldn't figure out what my username was, I had to ask in the chat. It's possible to embed recursive iframes, so I can see that being exploited for bad things. Otherwise I like the idea. People in the chat were nice, but I can't help but think that soon chat rooms will be full of chatGPT bots and nobody will be any the wiser!
So far from users I've heard they want:
1) username visibility fix making sure all colors are visible 2) removal of xss 3) ability to see your own username (its just "you" rn) 4) dark mode
open to any and all suggestions :) my first full stack app. its cool seeing it being used
Earlier quoted context omitted.
How can I fix this? this is my first full stack app I've built and it's nice seeing users interact with the site
https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Sc... Edit: this focuses on script tags and other means to inject code, but most defenses also work for other injected tags
first time figuring out opsec !
Really wanted to enjoy this, but it seemed like the room size of 5 was way too small. People would pop in and out endlessly hoping for some bustle but none seemed to be able to build. What chat I did get really recreated the 14 year old edgelords in chatrooms experience though. Lots of porn gif spamming
I'm trying to replicate the feeling of a hostel commonroom
Earlier quoted context omitted.
You can try escaping HTML submitted from the form. Or even simply detecting the presence of any HTML tag and rejecting such submissiobs with a friendly error message.
ah yes! i will do this in the next version. someone recomended leaving some of the xss elements like the image and video function with the old school chat vibes but I'm not sure what to do lmaooo
[b]bold[/b] [i]italic[/i] [img]example.com/image.jpg[/img] [youtube]youtube.com/watch?v=someVideo[/youtube]
Some user was able to open a browser modal with a custom message in everyones browser. Any ideas how they did that?
The author of the site was naughty and didn't do any sanitization :) They said they've fixed it in another comment, though.
Earlier quoted context omitted.
You can try escaping HTML submitted from the form. Or even simply detecting the presence of any HTML tag and rejecting such submissiobs with a friendly error message.
ah yes! i will do this in the next version. someone recomended leaving some of the xss elements like the image and video function with the old school chat vibes but I'm not sure what to do lmaooo
function asTextContent(input) {
const tempElement = document.createElement('span');
tempElement.textContent = input;
return tempElement.innerHTML;
}