Sourcehut account takeover via build logs (XSS in ansi2html) (blog.arusekk.pl)

<a href="https://news.ycombinator.com/item?id=49835996">Comments</a>