Comment

Comment by MajorSauce

I completed the challenge. You don't need to see the result of the entry to deduct if XSS is possible.

If the server is parsing your input, maybe you can find a way for the server to leak more than it wants.

If you want more information, or simply the answer, PM me.

parent MajorSauce 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton