Anyone can inject content and scripts into your HTTP pages. Anyone? So, you for instance? I'll take you up on that. Here's a dangerously exposed HTTP page.

Anyone can inject content and scripts into your HTTP pages. Anyone? So, you for instance? I'll take you up on that. Here's a dangerously exposed HTTP page. Inject a malicious script into it for us: http://www.blogabond.com/CommentView.aspx?CommentID=177 http://www.blogabond.com/CommentView.aspx?CommentID=177 My understanding is that you'd need to be sitting between me and that webserver somewhere. If my ISP injects something into that page that changes it so that it no longer shows a dumb travel story from 15 years ago, I think the proper solution would be to change ISPs. The webpage itself is fine.