‹ BackHN Continuity

Thread

Sourcehut account takeover via build logs (XSS in ansi2html)

153 points · 29 comments · arusekk

  1. amatecha · · focus · HN ↗
    nitpick: typo "Vulnerabile" :)
    1. arusekk · · focus · HN ↗
      Fixed! (You can send me patches for <a href="https:&#x2F;&#x2F;git.sr.ht&#x2F;~arusekk&#x2F;arusekk.srht.site" rel="nofollow">https:&#x2F;&#x2F;git.sr.ht&#x2F;~arusekk&#x2F;arusekk.srht.site too)
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.