6 ms·

Anything that you couldn't really do firing off an ajax request after the page loads?

• blasdel 16y ago
  No same-origin-policy, since you can't access the data in the response, but you could do that already with hidden iframes.
  • mseebach 16y ago
    You could stick hundreds of huge images forced to 1x1 px size. Maybe the "annoy a minority of people with tight bandwidth-caps"-attack isn't all that big of a threat.