Last week someone dumped one of their scripts onto my private git server instance and created issues with attempted XSS. Purely due to chance, I was using the m

Last week someone dumped one of their scripts onto my private git server instance and created issues with attempted XSS. Purely due to chance, I was using the mobile browser to inspect these which didn't have a script blocker installed. It has one installed now. You might think "nobody will do this to me" but the internet is filled to the brim with skids who have nothing better to do than scan your router for any open ports (or in a recent case, attempt to scan your IPv6 /64 subnet, though I'm questioning the sanity of that move). If they find anything they will blindly shove their shit into your IoT hardware. Maybe it'll work. Maybe it doesn't. They don't care, they've already spammed the next host. Do not underestimate the probability of someone wanting to ram their script up into your IoT or router.