that is exactly what is looks like: it has a HTML injection vuln in the UI. yes, the same UI that can read/write to your host from JS lol
- they/any
- significantb.it/
working on a @styx-os.
 | ||
"accidentally-vengeful telco nerd"
—Tom Scott
platform sec researcher, OS dev, systems architect, composer; Other (please specify). vintage computer/electronics nut.
I am open to tag suggestions - if there is something you want me to tag on my posts, leave a comment. <3
take a look at
this cool bug I found 🪲
discord
@sirocyl
mastodon/whatever
social.treehouse.systems/@sirocylrevolt.chat (occasionally active)
@sirocyl#5128
new blog:
significantb.it/styx linux OS project
styx-os.org/You must log in to comment.
in reply to @lexi's post:
why would you put a web technology inside a video game in the first place oh my god
There are many good reasons:
- Flash is dead, and so is Scaleform
- All UI frameworks suck, but especially the in-house ones
- Using HTML 5 means you can teach webdev script kiddies to make games (ez) instead of forcing C++ programmers to do scripting that they feel is beneath them
npm install react
Valve.. they really need to pull their heads out of their rectums, because this is getting scary now.
I'm not entirely sure what I'm looking at here, what's going on in the votekick box?
can you actually run scripts from this context? i would've assumed they'd've locked down the super duper bad stuff at least
Pinned Tags