I don't know if this should be on meta or on the Information security stack exchange, so please tell me. With the code snippets feature, you can insert malicious code out of view, and people will likely not notice and execute the code. The code snippets feature is basically allowing you to make a website inside of stack exchange, and although you can view the code before executing, it is still very dangerous.


1 Answer 1


If you have found what you consider to be a vulnerability please use the Contact Us link at the bottom of every page and provide SE with details.

I'm not sure what you are describing is a vulnerability, though.

Be aware that the Stack Exchange sites that allow code snippets are very much for people who will notice, and review the code to see if it suits their needs. They aren't going to be run unwittingly by people.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .