4 ms·

Same-site scripting: http://seclists.org/bugtraq/2008/Jan/270 http://seclists.org/bugtraq/2008/Jan/270

• icebraining 9y ago
  Interesting. Still, that requires the attacker to be already running a process on the victim's machine, even if with reduced privileges. Nowadays that's rare, since there's no reason not to give each user its own network namespace, at the very least.