4 ms·

I believe that cross-site scripting [0] can be used to get around domain restrictions. [0] https://en.wikipedia.org/wiki/Cross-site_scripting https://en.wikipe

• alexbecker 10y ago
  That requires exploiting an XSS vulnerability in the target domain however. Such vulnerabilities are sadly common, but can be prevented.
• AgentME 10y ago
  No, that's not really related. Cross-site scripting's name comes from the vulnerabilities which allow an attacker to insert a <script> tag pointing at a script on another domain (or an inline script). It doesn't have to do with cookies and doesn't get around or really interact with the "block 3rd party cookies" setting.