XSS on using the legacy "Graphie To PNG" API

(hackerone.com)

9 points Rahat_Ahmed | 2 comments | 14 Apr 25 11:33 UTC | HN request time: 1.279s | source

1. unsnap_biceps ◴[17 Apr 25 22:56 UTC] No.43723090[source]▶

I had no idea svg files allowed embedded JavaScript. What a great find