Sourcehut account takeover via build logs (XSS in ansi2html)

 (blog.arusekk.pl)

20 points | by arusekk 1 hour ago

1 comments

  • JamesCoyne 20 minutes ago
    Really commendable work fixing up the upstream python project. I don't think there's anything to be embarrassed about in the timeline.