Public JSON Formatter Exposes Years of Sensitive Data and Has Stored XSS
For over seven years, a public JSON formatter saved engineers' pasted data to a public "Recent Links" feed, leaking thousands of records such as Turkish ID numbers, IBANs, and US Social Security numbers. The service also harbors a stored cross‑site scripting flaw that can run attacker code in visitors' browsers, underscoring the hidden risks of cheap debugging tools.