logoalt Hacker News

arcwhiteyesterday at 6:53 AM1 replyview on HN

Compared to what? What's your baseline for how much a user-interaction-required XSS vulnerability should be worth?


Replies

sans_souseyesterday at 7:28 AM

I'm not basing it on math.

Are you saying tho that 2.5k wouldhave been adequate in 2019? I expect 5k would have been on par then too. But idk