@jorianwoltjer.com on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Jorian

jorianwoltjer.com

did:plc:3ffrnqiish5sra3vcmrjox72

Apparently, navigating to a javascript: URL returning a string will write it as HTML to the DOM. This allows for an interesting XSS payload: https://x.com/icesfont2/status/1862857764025888947

2024-12-05T11:52:27.015Z