docpad-archive / docpad-skeleton-nodechat Goto Github PK

Capability to keep / retrieve previous discussion.

Related feature would be to display the last 5 minutes / 20 posts of chat when getting into a new chat room

Cross-site-Scripting payloads can be placed on the username field:

payload inserted:

payload executed (after payload inserted):

payload executed (on victim's browser

for reference see:

• https://vulnerabilities.teammentor.net/article/Cross_Site_Scripting_Attack
• https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)
• http://beefproject.com/

Elsewhere, DocPad is now using static/ instead of files/ for clarity. (After all, all of DocPad consists of “files”. ☺)

https://github.com/martynsmith/node-irc

Capability to invite people to a chat: email / sms... push notification for smartphone when the chat is enabled as native app?

Capability to share files through the chat