Hacker News Reader

The system seems to be vulnerable to an XSS attack injected via the contract; the exploit seems to work on Chromium(60) but not on Firefox(55)

https://twitter.com/IAmMandatory/status/915439417665261568

View on HN

This is my bad, I could've made it work for Firefox but was just testing if it was vulnerable at all. I don't really wanna pay the ether to fix it since I don't actually want to exploit anyone :)

Reply on news.ycombinator.com