3 ms·
Wouldn't any (third-party) JavaScript on the page still have access to it?
by morgante 10y ago
Wouldn't any (third-party) JavaScript on the page still have access to it?
- fredsted 10y agoThey would also have access to everything else, including the entered password.
- morgante 10y agoRight. The scenario I'm considering is not a hostile attacker but simple an overzealous analytics script which also tracked hash strings. Heck, since some sites used to do AJAX navigation that way it wouldn't surprise me if some analytics services were configured to track hash strings.