Hacker News Reader

Ah there's the inevitable alert("test") messages. Thank god for the 'prevent this window from generating additional popups' option in browsers these days.

Makes me want to learn d3 finally.

View on HN

I got a "You've been XSSd" popup. Not sure if humorous alert("test") or if demo JS exploit...

Edit: Some Ctrl+F resulted in "console.log("halp"); alert("you've been XSSd");" from "Harrison Shoebridge". Naff.

Without looking into the source, I'd bet someone tweeted the "exploit", just to make the point that going to that page basically runs arbitrary javascript in your browser.

Reply on news.ycombinator.com