Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Browser Patch to Prevent Cross-Site Scripting Was Deployed to Entrench Big Tech (gigablast.com)
3 points by EchoReflection on July 17, 2022 | hide | past | favorite | 1 comment


If one bit of js can query google and bing, what hinders an evil developer to query my current session of my banks website? Or my <your favourite online store> account?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: