3 ms·
I bet that developers writing XSSable IoT firmware web interfaces aren't exactly the type that would read a spec like this and implement it...
by 0x0 11y ago
I bet that developers writing XSSable IoT firmware web interfaces aren't exactly the type that would read a spec like this and implement it...
- Eridrus 11y agoThey're not going to see this spec, but if this gets implemented and awareness seeps out, at some point this should become standard practice as a way to mitigate unknown vulnerabilities without investing heavily in security. Companies love bandaids they can add on top without changing their code.