4 ms·
Couldn't an attacker override window.getComputedStyle() at runtime anyway?
by MasterScrat 11y ago
Couldn't an attacker override window.getComputedStyle() at runtime anyway?
- socket0 11y agoPresumably Facebook would have CSP headers set on some of the scripts they load to prevent JavaScript on the page from interacting with their own scripts.