The system seems to be vulnerable to an XSS attack injected via the contract; th... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

satyanash on Oct 4, 2017 | parent | context | favorite | on: Show HN: The Million Dollar Homepage as an Ethereu...

The system seems to be vulnerable to an XSS attack injected via the contract; the exploit seems to work on Chromium(60) but not on Firefox(55)

https://twitter.com/IAmMandatory/status/915439417665261568

mandatory on Oct 4, 2017 [–]

This is my bad, I could've made it work for Firefox but was just testing if it was vulnerable at all. I don't really wanna pay the ether to fix it since I don't actually want to exploit anyone :)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact