4 ms·
Isn't a JQuery Plugin something that executes on the client-side? If so then how can something on the client-side compromise the security of a server? Isn't the
by galaxyLogic 8y ago
Isn't a JQuery Plugin something that executes on the client-side? If so then how can something on the client-side compromise the security of a server? Isn't the fault on the server-side?
Or is this a PHP server-plugin which if installed on a PHP server makes them insecure? But of course anything you install on server can make it insecure. No?
- CharlesW 8y ago> If so then how can something on the client-side compromise the security of a server? This is answered in the plug-in author's thorough note, posted a couple hours before you posted this.
- blueimp 8y agoFor a breakdown on how this could happen, please see my comment here: https://news.ycombinator.com/item?id=18267309 https://news.ycombinator.com/item?id=18267309
- runn1ng 8y agoThere is an example PHP code in the same repo and people copy-pasted that into production. The issue is not in the front-end jQuery library, despite the title.