Daniel LeCheminant
danlec.com · Personal blog · on HN since 2013
Daniel LeCheminant, a developer, writes about web security bugs and compact coding demos like Stack Overflow and Trello in 4096 bytes.
What HN saysHN links it for the XSS via spoofed React element post and the 4KB Stack Overflow and Trello clones, which commenters treat as references.
16HN people shared it
4linked it in comments
13stories submitted
425story points
8 years agolast shared
2013people per year2026
Most-shared posts
- 1XSS via a spoofed React element5 people · 9 points · first shared 2015 · discussion on HN
- 2As much Stack Overflow as possible in 4096 bytes4 people · 384 points · first shared 2014 · 72 comments on HN
- 3Trello in 4096 bytes4 people · 12 points · first shared 2014 · 2 comments on HN
- 4A bug in the Sundown and Redcarpet markdown parsers may lead to XSS1 people · 6 points · first shared 2015 · 3 comments on HN
- 5Hacking StackOverflow.com's HTML sanitizer1 people · 6 points · first shared 2014 · discussion on HN
- 6How the Trello Team Uses Trello1 people · 5 points · first shared 2013 · discussion on HN
- 7HackerOne's First XSS1 people · 3 points · first shared 2015 · discussion on HN
- 8St4k1 people · first shared 2016
What HN people wrote when they linked it
localvoid · 2018-09-24
I hope you are aware about this attack vector[1] that was fixed in React long time ago.
1. http://danlec.com/blog/xss-via-a-spoofed-react-element
hawski · 2016-10-25
It's Stackoverflow in 4kB. Here is the explanation: http://danlec.com/blog/stackoverflow-in-4096-bytes
jc4p · 2016-01-23
tongue in cheek, but check out Trello in 4096 bytes: http://danlec.com/blog/trello-in-4096-bytes
thedufer · 2014-02-17
There's a short list at the end of the post about Trello4k: http://danlec.com/blog/trello-in-4096-bytes