3 ms·
No same-origin-policy, since you can't access the data in the response, but you could do that already with hidden iframes.
by blasdel 16y ago
No same-origin-policy, since you can't access the data in the response, but you could do that already with hidden iframes.
- mseebach 16y agoYou could stick hundreds of huge images forced to 1x1 px size. Maybe the "annoy a minority of people with tight bandwidth-caps"-attack isn't all that big of a threat.