[z_Goon]

While hunting bugs, a reoccurring issue is trusting variables.

It really confuses me when JS is used to authenticate/display sensitive information.


Challenge:
Without editing the snippet below, change the Default Alert.

Code

w3schools.com/code/tryit.asp?filename=FWYYSLL94OSL

Code

var message = "Default Alert";

alert(message);

Post here when you've done it and PM me proof to verify.


Winners:

Code

No Winners Yet ;(

[Abruptum]

While hunting bugs, a reoccurring issue is trusting variables.

It really confuses me when JS is used to authenticate/display sensitive information.


Challenge:
Without editing the snippet below, change the Default Alert.

Code

w3schools.com/code/tryit.asp?filename=FWYYSLL94OSL

Code

var message = "Default Alert";

alert(message);

Post here when you've done it and PM me proof to verify.


Winners:

Code

No Winners Yet ;(

Well maybe i am too stupid but this would fuck up the js world in a global score if this works.
Look here https://security.stackexchange.com/quest...rl-exploit
This will not work...