317 posts
Clans: no
Creator Points: 0
Favorite Level: In Silico
Hardest Demon: acu
Mini-Profile Background: {"image":"https://wallpaper-mania.com/wp-content/uploads/2018/09/High_resolution_wallpaper_background_ID_77702087841.jpg"}
Mini-Profile Name Color: ffffff
Mini-Profile Text Color: ffffff
|
Post by x on Apr 7, 2023 15:26:26 GMT -5
Ok so I saw that post in the shout box and this board. Needless to say I am very concerned about the safety of the forum now. I didn't entirely understand the wording of it but I'm 45% sure he meant that you could run HTML scripts through the shout box or though posts (someone correct me if I'm wrong because I am probably wrong) That could really screw with everything and I don't think I need to explain why. But either way my account is now compromised at least, because I'm seeing posts in NL that I never posted While I really don't care about the post itself (the post was literally just the letter H its not like it was slander or anything). I obviously don't like that prospect of people having access to my account. I really hope this gets fixed because I like the small community we have on this forum. Jayflight WillFlame(Also I feel obliged to say the obvious here. But I don't think this was a malicious attack or anything. But if I'm correct this is a major security flaw and does need addressing) (log out before visiting this thread just in case something happens idk) gdforum.freeforums.net/thread/66687/shoutbox-comment-bug
|
|
|
Post by Jayflight on Apr 7, 2023 21:54:08 GMT -5
Looks like you're right, I had accidentally clicked on the thread beforehand so I'm not sure what's going on with that. Tried locking the thread but it seems to bypass that, strangely enough. Will absolutely be bringing this to Will's attention x EDIT: Even archiving it from view didn't stop it but at least it might not lag the forum for regular users. Interesting glitch right here for sure
|
|
|
Post by bzzzz on Apr 8, 2023 0:13:56 GMT -5
you could run HTML scripts yes and not just scripts (I also embedded a youtube video in one comment but that comment got deleted not by me) I made 2 comments: - the one that makes you vote in gdforum.freeforums.net/thread/66687/shoutbox-comment-bug
- the one that makes you post h (thread deleted not by me, comment deleted by me)
(log out before visiting this thread just in case something happens idk) the something already happened, that thread is not special because shoutbox is on every page except error pages (I think)
|
|