Exploit

:o ( ajax )

Nice, unfortunately according to markdown specifications this is actually intended behavior. Why it's intended behavior is beyond me. As apparently even XSS is intended behaviour according to whatever idiots made markdown.

I can fix this specific "exploit" but only because it's annoying

Edited Alright, added a CSRF token to logout.

Nice, sorry for the inconvenience ^^

**Edit : **You forgot the login :)

Thanks for telling us. You probably saved me a good 10 minutes in case I would have to find the cause of being logged out randomly later on. Although, a new version of the website is going to roll out shortly, where everything uses CSRF with no exceptions at all

Edited

BySlownLSat 17th of July 2018 01:32:17

Nice, sorry for the inconvenience ^^**Edit : **You forgot the login :)

You can't do anything annoying with the login anyway

ByMarcuzat 17th of July 2018 01:37:36

Thanks for telling us. You probably saved me a good 10 minutes in case I would have to find the cause of being logged out randomly later on. Although, a new version of the website is going to roll out shortly, where everything uses CSRF with no exceptions at allEditedYou can't do anything annoying with the login anyway

^^

BySlownLSat 17th of July 2018 01:54:14

^^

Turns out login had code to intentionally log you out. Now just re-directs you to home instead. Fixed.

On a side note, Mbappé is a diving, time-wasting cheat :^)

ByMarcuzat 17th of July 2018 10:53:57

Turns out login had code to intentionally log you out. Now just re-directs you to home instead. Fixed.On a side note, Mbappé is a diving, time-wasting cheat :^)

Nice Work :)

Closing :)