@IceWolf I don't even know if this is valid javascript, i just saw @monorail did something similar in her bio and thought it'd be amusing to do in a public post

i think you'd have to have some major problems with your software in order for it to actually pop up an alert

@Felthry @IceWolf yeah, if this works, it means your software is vulnerable to an attack that there's very little excuse to be vulnerable to these days

@Felthry @IceWolf there was actually a tweetdeck exploit a while ago that did a very similar thing except the javascript located its own script tag, went up a couple parent elements to find the tweet itself, then simulated a click on the retweet button. just viewing the tweet in tweetdeck would cause it to retweet itself

iirc it got retweeted by the official BBC news account