Sourcehut account takeover via build logs (XSS in ansi2html)(blog.arusekk.pl)
136 points by arusekk | 27 comments
A vulnerability writeup describing a wormable XSS in SourceHut's ansi2html.py that let attackers take over accounts of users viewing injected build logs.