SRL Archive - News and General

Someone found out how to run execute html/javascript through video comments and people have now passed google's security and are able to post redirects which can steal your session through your cookies and all sorts of bad things. You could even get a virus. ^^

I recommend everyone stay away.

Wow, thanks for the info. I know to avoid even slightly suspicious videos now. :)

From: TRiLeZ
Someone found out how to run execute html/javascript through video comments and people have now passed google's security and are able to post redirects which can steal your session through your cookies and all sorts of bad things. You could even get a virus. ^^

I recommend everyone stay away.

Thanks mate

I think they already turned on a safe mode.

Yeah, and /b/-tards started uploading 100s of porn videoes with scripts turning off the flag button

App Store too.

Same people? Then again, completely different approaches/effects.

Yeah it's fixed now I think.

Ya, it's safe.

Lol @ Google though, having such an obvious exploit to begin with.

Now they just filter out the words <script>.

Haha I used it to. Those 2 commands.

<script>IF_HTML_FUNCTION?<h1><marquee><font color="red"><u>MESSAGE HERE<script>

<script><h1><marquee style="position: absolute; top: 0px; bottom: 0px; left: 0px; z-index: 9999999; right: 0px; background-color: rgb(0, 0, 0);"><font style:="font-size:60px" color="red"><u style="">MESSAGE HERE<script>

I did it at some famous youtube channels with the message Justin Bieber was here :p

From: Harry
Lol @ Google though, having such an obvious exploit to begin with.

Now they just filter out the words <script>.

Yeah, they failed hard :)