Hacker News Reader

Cool idea, awesome UI, but vulnerable to XSS attacks :(

Proof (NSFW): https://getnando.com/showhn (in case it gets fixed or if you are at work - as soon as the comments load, it redirects to an adult website)

View on HN

Why would you need to redirect to an adult site to make your point, when you could have redirected to something more interesting and relevant and SFW?

Like this for example:

https://www.google.com/search?q=cross+site+scripting

It wasn't me, I have playground etiquette when it comes to Show HNs. Some men just want to watch the world burn.

Yeah, need to fix that... Just got rid of the javascript so it's back up.

Reply on news.ycombinator.com