Managed to make a massive cursor and it was broadcasted to the whole party. Had some fun hacking this with Chrome dev tools.
Was simple as breakpointing in dev tools on "mousewheel", setting h.scale = 15, and then resuming. Massive cursor and massive fun. I'm sure people were wondering how I got mine so big. Considering it was clamped to 1.
I've thought about injecting a non-zero number to crash the app or perhaps inject some XSS to run some fun code on everyone's machine but...I decided to be nice and not literally crash the party. ;-)
All that's needed to fix this "exploit" is to properly sanitize data on the way in. Classic example of why sanitizing I/O is important!
The band Light Light made a delightful interactive music video based on the same principle: http://donottouch.org. Sadly, it appears only a recording of it remains online.
37 comments
[ 3.4 ms ] story [ 94.3 ms ] threadWas simple as breakpointing in dev tools on "mousewheel", setting h.scale = 15, and then resuming. Massive cursor and massive fun. I'm sure people were wondering how I got mine so big. Considering it was clamped to 1.
I've thought about injecting a non-zero number to crash the app or perhaps inject some XSS to run some fun code on everyone's machine but...I decided to be nice and not literally crash the party. ;-)
All that's needed to fix this "exploit" is to properly sanitize data on the way in. Classic example of why sanitizing I/O is important!
All in all-- fun app OP.
https://news.ycombinator.com/from?site=cursordanceparty.com
I like these fun examples, and the creativity of the person behind it.
Another website killed by HN?
>Bring your code, we'll handle the rest.
>Made for any language, for projects big and small. Railway is the cloud that takes the complexity out of shipping software.
Not massively convinced at the moment.
OP might wanna consider putting in a credit card before trying to do HN scale next time
Reminiscent of this internet classic :)