The recent chat feature that was added recently has a XSS flaw in it. For testing purpose, I created a chat room called
<b>123</b> and as you can see in the screenshot below, the
<b> tags weren't escaped.
Meta Stack Exchange is a question and answer site for meta-discussion of the Stack Exchange family of Q&A websites. It only takes a minute to sign up.Sign up to join this community