Trolling Fefe Readers

Recently Fefe linked to our blog article about croc.

We took this opportunity to troll his readers by using a bug in Fefe’s blog software that one of our team members has found a while ago.

This is done by including an evil iframe into the code of our post:

<iframe src="\\;SameSite=None;Secure" width=1px height=1px></iframe>

The bug is that Fefe’s blog allows us to set a cookie for an external stylesheet.

To get rid of the stylesheet just clear your cookies at Fefe’s blog and do a full refresh (Ctrl+Shift+R).