3 ms·
Oh hey, and all your js is now on one origin so if you have an xss in your third-party blog software, you now have xss in your app! Also, good luck writing a s
by zxcmx 9y ago
Oh hey, and all your js is now on one origin so if you have an xss in your third-party blog software, you now have xss in your app!
Also, good luck writing a sane content-security-policy if you do this.