You may have seen a message like this yesterday on SteemitX.com. My excitement to release new features to you guys resulted in a cross-site scripting bug being missed. Posts in Steemit that had embedded scripts were being passed and ran on SteemitX. This has now been corrected using input filtering on comment text.
My professional career has revolved around the IT and Systems Administration side of technology. My interests have also led me to learn more about technologies and languages for building websites and web apps, but I am still learning (it's a never-ending process).
That's where you come in!
If you are a professional in the web app industry, I want to learn from you! Education isn't free though, so I want to pay a portion of profits from future additions and tools to whoever is willing to test them.
Payouts
Bugs that are included:
Bugs that may not be included but may receive a payout if useful:
This list is subject to change and is based off of my own subjective determination.
This definitely was a critical bug in my book, but it was a rather trivially simple bug to test for so I am offering $100 SD to the person who sent the XSS alert notification. Please post a link to your post/comment that sent the alert and I will send you $100 SD (may be a couple days, have to transfer more funds in as I have Powered Up all my Steem so far).
NOTE: Steemitx.com does not store any user information other than Google Analytics and does no authentication to help prevent any negative actions against users. Future implementations will begin caching your filter list and settings. The goal of SteemitX is to provide a tool for the community that does not jeopardize user security, safety or privacy.
