Expected Findings
- Stored XSS via message content.
- Cross-room message leakage in the default feed.
Shared Messaging
Chat App
The room feed renders raw message HTML and accidentally shows messages from other rooms in the default view.
CWE-79CWE-200
Primary Flows
- Messages feed GET renders raw HTML messages
- Post message POST message to store unsanitized content
Signals
Validation
if (message.length > 0) send(message)