TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

XSS issue affecting every page on TheDailyWTF

9 点作者 sikhbeats将近 11 年前
e.g. http:&#x2F;&#x2F;thedailywtf.com&#x2F;Articles&#x2F;<p>Every page is playing an annoying sound, embedded in a comment appearing in the side bar [1]. It looks like they were able to fix the issue in the forum [2], but thedailywtf.com itself is still suffering from the issue.<p>[1] http:&#x2F;&#x2F;i.imgur.com&#x2F;0YviIOJ.png<p>[2] http:&#x2F;&#x2F;what.thedailywtf.com&#x2F;t&#x2F;how-about-this-audio-src-http-soundjax-com-reddo-64951-5ecddyhorn-mp3-controls-autoplay-audio&#x2F;889&#x2F;23

2 条评论

sikhbeats将近 11 年前
(update) Sunday 16:20 UTC: looks like they fixed it. Though it&#x27;s not entirely clear if the thread got pushed out of the front page and the bug still remains.
ExpiredLink将近 11 年前
Funny!