2 ms·
google.com is a valuable target for XSS attacks. Keeping content off this domain reduces the attack surface.
by advisedwang 9y ago
google.com is a valuable target for XSS attacks. Keeping content off this domain reduces the attack surface.
- adtac 9y agoI too think this is the reason. It does, however, allow for cool domains like https://summerofcode.withgoogle.com https://summerofcode.withgoogle.com
- Hurdy 9y agoThis kind of marketing content is often provided by an agency. Hosting it on google.com where users are logged in would require extremely strict security reviews.