3 ms·
Everyone on this thread categorising the question as FUD should read up on the Same Origin Policy of the browser and the context in which embedded javascript ge
by alltakendamned 11y ago
Everyone on this thread categorising the question as FUD should read up on the Same Origin Policy of the browser and the context in which embedded javascript gets executed.
Definitely enough room for malicious behaviour.
Also, the threat does not just include ads, but the fact that too many a developer is very happy of pulling in 10+ 3rd party javascript libraries into their web application, effectively exposing their web application to risk in case one of these 3rd parties gets compromised.