Jxb on Nostr: Nope. The attack that I saw was a Proof of Concept. There were no data transmitted, ...
Nope. The attack that I saw was a Proof of Concept. There were no data transmitted, just an 'alert("XSS")'. But no1 knows if some1 else exploited the same vuln. Would change key.
Published at
2022-12-19 13:35:33Event JSON
{
"id": "5c7cab88560cc6e5c997ad930633f543a6ff64cdaec9eec488ba2da3b0d88043",
"pubkey": "0000000e5c8cc1a3b94d661506a0cc3e0e3493cb1241b305a6549ea3c3794006",
"created_at": 1671456933,
"kind": 1,
"tags": [
[
"p",
"ede2c43645ebeef44bdc058502b62c260737dfa2e0605a30d85531bb63f1a37b",
"wss://relay.nostr.ch"
],
[
"p",
"e869b18e7b1603581a75f9c2ff989e34bd4f423429c31062930f43c044614425"
],
[
"e",
"e3648793c738783b2fd09227b20a8febb88a2e0a17e5f3c5e716f372ccef3ab9",
"wss://relay.nostr.ch",
"root"
],
[
"e",
"15beac9e9cebbbc7530495d34dce35d0b57fbb37a82d573adefae2edcc48363a",
"wss://relay.nostr.ch",
"reply"
],
[
"client",
"astral"
]
],
"content": "Nope. The attack that I saw was a Proof of Concept. There were no data transmitted, just an 'alert(\"XSS\")'. But no1 knows if some1 else exploited the same vuln. Would change key.",
"sig": "e5684d049b7d292947e9a90cbc500ad96f59d269e1021a5ab69ef55ca0caa5a013d5a493133c7842937fbabb8c3e41952ee7a3a31c624f92b2d757052ff64987"
}