Hacker News Reader

Anybody else find it hilarious that when you navigate to https://html5sec.org/ they have a series of 3 XSS alert() attack vectors at work?

At first I thought it was intentionally done for demonstration purposes, but now I'm just confused about the site.

The author is using rawgithub.com to serve javascript files, but it seems that they serve 'erroneous' files when used too much.

It's actually kinda funny, they even go up to redefine some Javascript variables such as Infinity[1].

"This website abuses rawgithub.com. You should complain to its owner."