3 ms·
Do you have a source for the easter egg security issue? Haven't read about it anywhere, and can't seem to find anything either.
by captn3m0 11y ago
Do you have a source for the easter egg security issue? Haven't read about it anywhere, and can't seem to find anything either.
- kuschku 11y agoHere is one: http://arstechnica.com/security/2015/04/no-joke-googles-april-fools-prank-inadvertently-broke-sites-security/ http://arstechnica.com/security/2015/04/no-joke-googles-apri... The issue was that they wanted to load the page – with the user logged in, etc – on com.google. For this they implemented an explicit URL parameter that would allow this.
- magicalist 11y ago> Attackers could have seized on the omission of the X-Frame-Options header to change a user's search settings, including turning off SafeSearch filters The horror!